Software Engineer
Mycroft is a security and compliance platform. Our customers trust us to secure their devices, manage their vulnerabilities, and quantify their risk. We have to do two things at once that usually pull against each other: ship fast enough to keep up with hyper-growth, and build something solid enough that customers are comfortable staking their compliance on it.
That tension is the job. We're looking for a full-stack engineer who can move quickly without leaving a mess behind - someone who owns what they build all the way to production and treats "it works on my machine" as the start of the work, not the end.
The team
Our engineering team builds and runs the entire Mycroft platform: product features, vulnerability scanners, data ingestion pipelines, AI-powered workflows, and APIs. We're small, Toronto-based, and frequently work together out of our Toronto office. Leadership writes code too, which means the people deciding what to build feel the same day-to-day friction you do, and are motivated to help fix it.
What you'll own
Real features, end to end. You'll design, build, and iterate across the stack; backend, frontend, and the infrastructure underneath when it needs you. You take a feature from a rough customer need to something running reliably in production.
The stability of your work. In a cybersecurity product the bar for "done" is higher. You write the technical design, get it reviewed, ship it, and you're on the hook when it's live.
Outcomes, not tickets. When a customer-impacting problem surfaces, you work directly with our customer experience and GRC forward-deployed engineers to solve it; you're trusted to do so without waiting for permission.
Product judgment. We don't have a layer of people translating requirements into specs for you. You'll put on a product hat, weigh in on direction, research technologies, and make architecture and infra calls that stick.
Our AI capabilities. You'll build the AI-powered features, integrations, and infrastructure behind our workflows and real-time risk quantification.
How we actually work
AI is a force multiplier, not a crutch. We support the use of AI tools. They’re a line item in your developer tooling stipend, not a guilty secret. But we’re a security focused company. When something breaks, "the model wrote it" isn't an answer. You ship code you understand, discuss in review, and can fix in production.
Real autonomy. You pick your own tools. You take on the important work that bubbles up. You're trusted to make good decisions and deliver without hand-holding or management overhead.
Small-company reality. No quarter-long planning cycles, or red tape to block you. If you've thrived somewhere small where you had to figure things out and owned what you shipped, this will feel like home.
You'll fit if
You have roughly 3+ years building web applications and shipping real products.
You're comfortable across Python and TypeScript
You're open-minded and curious: you'd rather learn a better approach than defend the one you already know.
You spot gaps, edge cases, and customer pain points and act on them, instead of waiting to be assigned the next step.
You've collaborated closely with engineers, product, and design to ship high-quality work iteratively.
You're in the Toronto / GTA area, legally able to work in Canada, with professional fluency in English.
Tech we use (and will teach you)
Languages: Python, TypeScript
Frameworks: Flask, FastAPI, Celery, React, TanStack
Infra: Google Cloud Platform, Kubernetes
Data: PostgreSQL, ClickHouse, Redis, RabbitMQ, Turbopuffer
Compensation & benefits
Salary + equity: $90,000-$130,000 CAD per year, depending on experience and qualifications.
Hybrid: work from home or from our downtown Toronto office.
Health and dental coverage.
Tooling stipend: You’ll receive a monthly stipend which you can use to spend on what makes you productive: AI subscriptions, developer tools, the lot.