{"id":35722,"url":"https://alion.io/job/filigran-senior-software-engineer-opengrc","title":"Senior Software Engineer - OpenCRQ","company":{"id":8105,"name":"Filigran","domain":"filigran.io","url":"https://alion.io/company/filigran","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["FR"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":65000,"max_usd":149000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Fastify","optional":false},{"name":"LLM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Node JS","optional":false},{"name":"OpenCTI","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Prometheus","optional":false},{"name":"RAG","optional":false},{"name":"React.js","optional":false},{"name":"STIX","optional":false},{"name":"TanStack Router","optional":false},{"name":"TAXII","optional":false},{"name":"tRPC","optional":false},{"name":"TypeScript","optional":false},{"name":"Vite","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-07-23T14:13:07Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-15T10:28:33Z","board_verified":true,"closed_at":null,"days_open":115,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":113},"description":"The Company\nFounded in 2022, Filigran is a global cybersecurity company on a mission to empower defense teams to be proactive through open-source solutions that uncover threats and drive action.\nFiligran stands out in the cybersecurity ecosystem through its open-source, AI-powered and threat-informed approach to Continuous Threat Exposure Management (CTEM). Our eXtended Threat Management (XTM) platform brings together threat intelligence, exposure validation and cyber risk reduction, enabling organizations to better understand their threat landscape and take action.\nAt the heart of Filigran is our open-source approach. Our vision is to unite defenders into a global community to make security more open, resilient and collaborative.\nAs Filigran continues to scale globally, we are building the organization, infrastructure and capabilities needed for our next stage of growth. How we scale matters just as much as how fast we scale: our CORE values: Cohesion, Openness, Responsibility and Equity shape how we work together, make decisions and build for the future.\nThe Role\nWe are looking for a Senior Software Engineer who is curious about the modeling problem underneath cyber risk and wants to help shape a young product.\nYou will join OpenCRQ as its fourth engineer and work across the data model, backend and product surface. Many foundations are still being defined, giving you meaningful influence beyond the features you directly own.\nYou will shape these decisions with the squad and experienced engineering and product leaders across Filigran. We value constructive disagreement, clear reasoning and shared outcomes, and we expect everyone to ask for context, challenge assumptions and learn from one another.\nThe problem you would be working on\nAsk a CISO what a cyber risk could cost, and the answer often still begins with a color: red, amber or green, often produced by a spreadsheet disconnected from current evidence.\nOpenCRQ replaces that color with a financial estimate and a traceable chain of evidence: which threat actors are active, which assets they can reach, which controls have proven effective and what the remaining exposure could cost.\nEvery step is computed from live data and must withstand a simple question from a board: “Where does that figure come from?” That is what makes this an engineering problem rather than a reporting one.\nOpenCRQ is Filigran’s cyber risk quantification product. It combines threat intelligence from OpenCTI, exposure and control validation from OpenAEV, and agentic workflows through XTM One. As these products become more connected, the squad will define what agents can ask of the risk model, which evidence they can use and how their answers remain safe and explainable.\nWhat you would work on\nEnd-to-end product ownership. Take product problems from early ideation and technical design through implementation, end-to-end testing and validation with users. You will have the autonomy to drive the work, while using the squad to challenge assumptions and improve the outcome.\n\nThe quantification engine. Turn threat frequency, control effectiveness and asset value into probabilistic loss distributions. Build general-purpose quantitative models that can evolve as assumptions and available evidence change, without losing reproducibility or explainability.\n\nThe correlation layer. Model complex relationships across OpenCRQ, OpenCTI, OpenAEV and customer systems. Map threat intelligence, including intrusion sets, techniques, campaigns and observations, to assets, vulnerabilities, exposures and control coverage. This includes adapting OpenCRQ to open standards and schemas such as STIX and OCSF, without coupling the product to a single representation.\n\nReliable ingestion at scale. Process hundreds of thousands of findings per tenant through delta syncs, long-running backfills and feeds with imperfect timestamps. You will help design observable, recoverable pipelines while extending tenant isolation as the domain grows.\n\nThe agentic surface. Design the contracts used by XTM One agents and the plain-language explanations behind risk figures. Together, the squad will define what models can safely do in a product whose outputs inform board-level decisions.\n\nWhat success could look like\nPriorities will evolve with the product, but within your first 6 to 12 months you could have:\nTaken a meaningful product problem from early ideation through implementation, end-to-end testing and validation with users.\n\nShaped a core part of OpenCRQ’s interconnected data model or quantification engine and documented the trade-offs behind it.\n\nMade a major ingestion or calculation path more observable, recoverable and reproducible.\n\nDefined or implemented a durable contract between OpenCRQ and another Filigran product or an open standard, without making the internal model brittle.\n\nHelped ship risk results that users can trace back to the evidence that produced them.\n\nContributed to the open-source release and to engineering practices the growing squad can build on.\n\nOpen source, like the rest of Filigran\nOpenCRQ is about to become Open source, alongside OpenCTI and OpenAEV. You will contribute visibly to a product whose risk calculations can be inspected, challenged and improved by the organizations running it.\nThe squad\nYou will join two senior engineers and a staff engineer, reporting to OpenCRQ’s Engineering Manager. The squad is small enough for you to influence its direction, without working in isolation.\nYou will collaborate with the VP of Technology, CTO and Principal Engineers on technical standards, and with the OpenCTI, OpenAEV and XTM One teams on cross-product contracts and integrations. These relationships bring domain knowledge and broader technical context into the squad’s decisions as it grows.\nWhat will help you succeed\nWe do not expect you to arrive with expertise in cyber risk or every standard named below. We are looking for a strong software engineer who can learn quickly, work autonomously and use the squad to challenge and improve decisions.\nA track record of taking complex product problems from an ambiguous idea to a validated outcome: framing the problem, making technical decisions, implementing the solution, testing it end to end and checking that it solves the user’s need.\n\nStrong experience with a modern TypeScript stack and practical knowledge of PostgreSQL beyond the ORM. You treat failure modes and observability as part of the design.\n\nThe ability to reason about complex relationships across systems and design interconnected data models that remain coherent as concepts and integrations evolve.\n\nComfort turning quantitative concepts into maintainable software. Formal training in statistics is not required, but you should be willing to work with probability distributions, orders of magnitude and models whose assumptions evolve over time.\n\nThoughtful use of coding agents: you know where they accelerate engineering and where their output needs careful verification.\n\nFluent English is required.\n\nUseful, but not required\nAny of the following would help, but none is expected:\nExperience in cybersecurity, GRC or risk quantification.\n\nFamiliarity with STIX/TAXII, OCSF, MITRE ATT&CK or other open cybersecurity standards and frameworks.\n\nExperience shipping features involving LLM agents, RAG or MCP.\n\nThe stack\nTypeScript end to end: React, Vite and TanStack Router on the frontend; Node.js, Fastify and tRPC on the backend; PostgreSQL with a code-first schema and Drizzle, all in one monorepo.\nOpenCRQ ships as a container, both as SaaS and on customer-managed infrastructure. We use OpenTelemetry for traces, metrics and logs, alongside Prometheus and continuous profiling.\nA significant part of the design work happens at the boundaries between OpenCRQ, the rest of Filigran’s product suite and customer security tooling. You will work directly with the teams that own those systems rather than having to navigate those boundaries alone.\nWhy Join Filigran? More than just a job.\nWe are a fast-growing, global and remote-first company, and we believe the best work combines purpose, impact and innovation. You’ll work alongside talented people across the world who care about what they build, how they build it, and the impact they make on the broader cybersecurity ecosystem.\n⭐ Be part of something bigger\nWe believe we do work that matters. Our open-source approach means that work extends beyond Filigran. You’re contributing to technology and ideas that strengthen a global community of defenders and help make cybersecurity more open and collaborative.\nWork at the edge of what’s next\nWe bring together cybersecurity, open source and AI - giving you the opportunity to work with emerging technologies, experiment with new ways of working, and contribute to how they are applied in practice.\nGlobal opportunity without borders\nBe part of a fast-growing, truly international team - collaborating across Europe, North America, APJ and beyond, with the flexibility of a remote-first environment. As we grow, you’ll have opportunities to expand your scope, take ownership, learn quickly and grow with us.\nA culture grounded in CORE\nCohesion, Openness, Responsibility and Equity define how we work together - with openness, ownership, collaboration and respect. These are the principles that guide how we make decisions, treat people and grow together, especially when no one’s watching.\nWhat you can expect\nCompetitive compensation + equity - everyone shares in our success\n\nRemote-first flexibility - work from wherever you’re based, with flexibility built into how we operate\n\n25 days PTO baseline - real time to disconnect, recharge and enjoy life outside work\n\nVolunteer days - paid time to contribute to causes that matter to you\n\nSet up for success - choose the equipment that works for you, with additional support for your remote work and development needs as our programs evolve\n\nTwo annual in-person get-togethers - one global company get-together and one team get-together, creating dedicated time to connect, collaborate and strengthen our culture beyond the screen\n\nEqual Employment Opportunity\nWe enable cybersecurity through inclusion - from code to culture.\nAt Filigran, we are proud to be an equal opportunity employer. We believe the diversity of our people makes our products and our team stronger. We welcome talent of every background, identity and lived experience, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability or veteran status.\nWhat matters here is what you bring, not what you look like, where you’re from or how you identify.\nReady to Join Us?\nApply now and help us build the future of the cybersecurity ecosystem, together.","description_format":"text","description_chars":10780,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Equity"],"hiring_locations":[{"name":"France","iso":"FR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Security Operations","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-07-23T14:13:07Z"},{"event":"close","at":"2026-10-07T13:40:36Z"},{"event":"reopen","at":"2026-11-09T11:19:08Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.618,"p_room":0.28,"age_days":114,"expected_fill_days":45,"reasons":["conf:4","win:tail","crowd:"],"computed_at":"2026-11-15T07:52:55Z"},"pay":null,"html_url":"https://alion.io/job/filigran-senior-software-engineer-opengrc","json_url":"https://alion.io/job/filigran-senior-software-engineer-opengrc.json","meta":{"generated_at":"2026-11-15T15:45:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7566,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8105},"rest":"https://alion.io/mcp/rest/get_company?id=8105"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffiligran-senior-software-engineer-opengrc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffiligran-senior-software-engineer-opengrc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffiligran-senior-software-engineer-opengrc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/filigran-senior-software-engineer-opengrc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffiligran-senior-software-engineer-opengrc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":35722}},{"tool":"search_jobs","arguments":{"company":"filigran.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":35722},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}