{"id":4163760,"url":"https://alion.io/job/filigran-principal-software-engineer-xtm-one","title":"Principal Software Engineer - XTM One","company":{"id":8105,"name":"Filigran","domain":"filigran.io","url":"https://alion.io/company/filigran","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["DE","FR","GB","IT","ES","PT"],"hiring_countries_total":6,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"Function Calling","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OpenCTI","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"STIX","optional":false},{"name":"TAXII","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-11-12T10:29:31Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T13:00:09Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"The Company\nFounded in 2022, Filigran is a global cybersecurity company on a mission to empower defense teams to be proactive through open-source solutions that uncover threats and drive action.\nFiligran stands out in the cybersecurity ecosystem through its open-source, AI-powered and threat-informed approach to Continuous Threat Exposure Management (CTEM). Our eXtended Threat Management (XTM) platform brings together threat intelligence, exposure validation and cyber risk reduction, enabling organizations to better understand their threat landscape and take action.\nAt the heart of Filigran is our open-source approach. Our vision is to unite defenders into a global community to make security more open, resilient and collaborative.\nAs Filigran continues to scale globally, we are building the organization, infrastructure and capabilities needed for our next stage of growth. How we scale matters just as much as how fast we scale: our CORE values: Cohesion, Openness, Responsibility and Equity shape how we work together, make decisions and build for the future.\nThe Role\nWe're looking for a Principal Software Engineer to define and drive the technical direction of XTM One, Filigran's AI platform for threat informed defense and the agentic core of the XTM Suite.\nXTM One creates and runs cybersecurity expert AI agents and dispatches their intelligence across OpenCTI, OpenAEV and OpenGRC. It also hosts the suite's shared commons (unified authentication, consolidated datasets, configuration) and ships both as SaaS and on premises. Every XTM product connects to it, which makes its architecture one of the most structuring technical decisions at Filigran.\nThis is not a management role: no headcount, no sprints. You own the technical craft, standards and vision of XTM One, and you carry them into the XTM Foundation, where the engineering principles shared by all products are set for the 60+ engineers at Filigran.\nYour Responsibilities\nVision & architecture\nDefine and carry the technical vision of XTM One over the long term, with technical and product leadership.\n\nOwn the platform architecture: agent runtime and orchestration, tool and MCP integrations, data and context layers, APIs, permission model, shared commons.\n\nDesign for SaaS and on premises from day one: multitenancy, isolation, upgrade paths, configuration, operability in customer environments.\n\nArbitrate key decisions on scalability, resilience, security, maintainability and cost, including LLM latency and inference cost.\n\nStandards & quality\nDefine the team's technical principles (architecture patterns, code quality, tooling, CI/CD, testing, development with AI assistants) and get them applied through docs, reviews, pairing and example.\n\nSet the bar for observability and reliability of nondeterministic AI workloads: metrics, logs, traces, evaluations, and guardrails that make agent behavior measurable and debuggable in production.\n\nKeep the right balance between features, technical debt and innovation.\n\nIntegration across products & XTM Foundation\nDefine how OpenCTI, OpenAEV, OpenGRC and future products integrate with XTM One: contracts, authentication, data exchange, versioning.\n\nBe a full member of the XTM Foundation: bring the XTM One perspective in, carry its decisions back, and keep coherence with the other Principal and Staff Engineers.\n\nIn the code\nWrite production code, prototype new approaches before the team adopts them, review critical PRs so that feedback teaches, and unblock engineers.\n\nWho You'll Work With\nReports to: VP of Technology\n\nKey collaborators: XTM One engineering team and its verticals; XTM Foundation (Principal and Staff Engineers across OpenCTI, OpenAEV, OpenGRC); Product leadership; open source contributors.\n\nWorking model: embedded in the XTM One team, with regular XTM Foundation work.\n\nProfile We're Looking For\n10+ years in software engineering, with technical leadership on complex production platforms.\n\nStrong fullstack background, with a backend and architecture focus. You master TypeScript and Python, the core languages of XTM One, and you can take a feature from the data model all the way to the UI.\n\nStrong system design: distributed systems, scalability, performance, security, observability.\n\nA 360° view of software engineering: product need, design, code and tests, CI/CD, packaging and release, infrastructure and deployment, production operations, monitoring, incident response. A container image or an upgrade path is as familiar to you as an API contract.\n\nBuilt and operated platforms delivered both as SaaS and on premises, including multitenancy and enterprise constraints.\n\nStrong AI affinity. You've been building with LLMs by choice for a year or two, with LLM systems in production: agent frameworks, tool calling, MCP, RAG and vector search, evaluation, and the discipline to make them reliable.\n\nTechnical watch is part of the job. You keep up with your craft deliberately (reading, experimenting, prototyping) and turn what you learn into concrete proposals.\n\nYou define and carry technical standards: you raise the bar on a team, you don't just follow it.\n\nExcellent written communication in English: design docs, ADRs and review comments that others learn from.\n\nAutonomous and at ease in a remote, asynchronous culture; you drive problems to resolution and enable others instead of becoming a bottleneck.\n\nBonus: cybersecurity domain knowledge (CTI, CTEM, MITRE ATT&CK, STIX/TAXII); extensible plugin or tool ecosystems; open source contributions or maintainership.\n\nAbout XTM One\nXTM One is Filigran's AI platform for threat informed defense. It is dedicated to creating and running cybersecurity expert AI agents and dispatching their intelligence across the products of the XTM Suite.\nEvery product of the XTM Suite is connected to XTM One to leverage AI agents for a more proactive platform that is easier to use. Within XTM One, agents can use and correlate data across products to make the most meaningful assessments and take the most relevant actions. XTM One also hosts shared commons such as unified authentication and consolidated datasets and configuration.\nWhy Join Filigran? More than just a job.\nWe are a fast-growing, global and remote-first company, and we believe the best work combines purpose, impact and innovation. You’ll work alongside talented people across the world who care about what they build, how they build it, and the impact they make on the broader cybersecurity ecosystem.\n⭐ Be part of something bigger\nWe believe we do work that matters. Our open-source approach means that work extends beyond Filigran. You’re contributing to technology and ideas that strengthen a global community of defenders and help make cybersecurity more open and collaborative.\nWork at the edge of what’s next\nWe bring together cybersecurity, open source and AI - giving you the opportunity to work with emerging technologies, experiment with new ways of working, and contribute to how they are applied in practice.\nGlobal opportunity without borders\nBe part of a fast-growing, truly international team - collaborating across Europe, North America, APJ and beyond, with the flexibility of a remote-first environment. As we grow, you’ll have opportunities to expand your scope, take ownership, learn quickly and grow with us.\nA culture grounded in CORE\nCohesion, Openness, Responsibility and Equity define how we work together - with openness, ownership, collaboration and respect. These are the principles that guide how we make decisions, treat people and grow together, especially when no one’s watching.\nWhat you can expect\nCompetitive compensation + equity - everyone shares in our success\n\nRemote-first flexibility - work from wherever you’re based, with flexibility built into how we operate\n\n25 days PTO baseline - real time to disconnect, recharge and enjoy life outside work\n\nVolunteer days - paid time to contribute to causes that matter to you\n\nSet up for success - choose the equipment that works for you, with additional support for your remote work and development needs as our programs evolve\n\nTwo annual in-person get-togethers - one global company get-together and one team get-together, creating dedicated time to connect, collaborate and strengthen our culture beyond the screen\n\nEqual Employment Opportunity\nWe enable cybersecurity through inclusion - from code to culture.\nAt Filigran, we are proud to be an equal opportunity employer. We believe the diversity of our people makes our products and our team stronger. We welcome talent of every background, identity and lived experience, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability or veteran status.\nWhat matters here is what you bring, not what you look like, where you’re from or how you identify.\nReady to Join Us?\nApply now and help us build the future of the cybersecurity ecosystem, together.","description_format":"text","description_chars":8944,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Equity"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"},{"name":"France","iso":"FR","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Italy","iso":"IT","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"},{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Security Operations","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-11-12T13:00:09Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":45,"reasons":["conf:1","win:early"],"computed_at":"2026-11-12T14:13:36Z"},"pay":null,"html_url":"https://alion.io/job/filigran-principal-software-engineer-xtm-one","json_url":"https://alion.io/job/filigran-principal-software-engineer-xtm-one.json","meta":{"generated_at":"2026-11-12T14:13:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29601,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8105},"rest":"https://alion.io/mcp/rest/get_company?id=8105"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffiligran-principal-software-engineer-xtm-one"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffiligran-principal-software-engineer-xtm-one"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffiligran-principal-software-engineer-xtm-one"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/filigran-principal-software-engineer-xtm-one\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffiligran-principal-software-engineer-xtm-one"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4163760}},{"tool":"search_jobs","arguments":{"company":"filigran.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4163760},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}