Global Information Security - Full-Stack Engineer

Global Information Security is building and operating software that helps security teams work more effectively. We are looking for a hands-on full-stack engineer to turn operational needs into reliable, secure products used by analysts and engineers across multiple regions.

The core of this role is software development: designing and delivering useful user interfaces, back-end services, APIs and data flows, then supporting those systems in production. You will collaborate with teams across Security Operations, identity and access management, privileged access management, cloud security, network security, data protection and vulnerability management.

Automation and AI may be part of a solution, but they are not the starting point for every problem. We value strong engineering fundamentals, sound technical judgment and the ability to build and maintain software, not simply generate code or assemble prototypes. You should be comfortable using development tools, including AI coding assistants, while remaining able to understand, test, debug and take responsibility for the code you deliver.

Responsibilities

• Design, build and maintain full-stack applications, including user-facing interfaces, back-end services, APIs and data integrations.
• Maintain and extend agentic AI workflows, including agent nodes, prompts, guardrails, tool bindings and human-in-the-loop approval gates, alongside evaluation and bias governance activities.
• Manage data models and pipelines in MongoDB/DocumentDB, ensuring data quality, synchronization integrity across systems of record and auditability.
• Own AWS infrastructure via Infrastructure as Code (IaC) and CI/CD; manage environments, releases, security posture (SSO/RBAC) and cost optimization.
• Maintain observability through dashboards, agent audit trails, structured logging, alerts and operational runbooks.
• Partner with security teams to understand operational challenges, shape requirements and deliver practical software solutions that analysts can adopt in their daily work.
• Write readable, maintainable code and contribute to scalable application architecture, automated testing, code reviews and technical documentation.
• Build and maintain REST APIs and integrations with platforms such as SIEM, EDR, SOAR, PAM, IGA, CSPM, DLP, ticketing and threat intelligence systems.
• Create and maintain CI/CD pipelines that automate build, test, security checks and deployment.
• Package and run services using Docker and contribute to deployments in Kubernetes-based environments.
• Operate production software through monitoring, alerting, incident investigation, reliability improvements and lifecycle management.
• Apply secure development practices, including input validation, secrets management, least-privilege access, audit logging and appropriate approval controls.
• Identify where workflow automation or AI can improve a process and where a deterministic software solution is more appropriate.
• Develop AI-enabled features and workflow integrations, including LLM APIs, tool calling and MCP integrations, with appropriate evaluation and human oversight where suitable.
• Measure the impact of delivered software through adoption, time savings, reduced cycle times, accuracy improvements and service quality metrics.
• Collaborate with colleagues and stakeholders across time zones, sharing knowledge and contributing to engineering standards and documentation.
• Mentor engineers and support consistent delivery practices across the global team.