Staff Software Engineer (GO) - Detection & Response

What are we looking for & about our team

At S1 we're building towards autonomous AI SIEM - helping SOC analysts achieve cybersecurity outcomes with greater accuracy and speed. To build it as an engineering organization, we solve non-trivial scale and data problems with a unique blending of cloud, distributed systems, and SW optimization techniques and services. Our mission is to enhance customer safety by advancing the detection & investigation capabilities and automation across all their security data, brought in one place (coming from both S1's security products and normalized from third-party data sources - and actionable in one SecOps platform, with one data architecture and one UI). We strive to provide robust, efficient, and scalable solutions that elevate the overall security posture of our clients.

Join us and help advance the state of the art of cybersecurity!

We are looking for a Staff Software Engineer to join our team that is behind one of our leading and differentiated AI SIEM product capabilities, STAR™ - Storyline Active Response, highly appreciated by customers (as well as praised in cyber reddits :) ) - responsible for real-time cloud-based automated hunting, detection, & response. It empowers security teams of our customers to create custom detection & response rules, and deploy them in real-time to the entire network or desired subset, to proactively detect & respond to threats.

What will you do?

As part of the team that we’re extending, you’ll work on systems processing vast amounts of data. You’ll take part in the architecture, design and implementation of a multi-disciplinary cloud-native software platform that daily processes billions of events and several petabytes of data, and serves tens of thousands of users (cyber specialists at enterprise & government customers across the globe, incl. at 4 or Fortune10 or hundreds of Global 2000).

• Design, develop, implement, test, document, and operate large-scale, high-volume and low latency applications, built to handle several millions of events per second.
• Translate business and functional requirements into robust, scalable, operable solutions that work well within the overall data architecture.
• Participate and collaborate with cross functional teams in the organization to understand the business requirements and to deliver solutions that can scale.
• Maintain application stability and data integrity by monitoring key metrics and improving codebase accordingly.
• Understand & maintain existing codebase by regular re-factoring and applying requested fixes and features.
• Learn new technologies that can solve our huge volume of data and the challenges it poses.

Your Toolkit: Golang, Java, Python, Kafka, AWS, GCP, Kubernetes, Docker, Github, ArgoCD

• Our new components are primarily developed in Go, we also use Java and Python in our current backend environment.
• Communication between microservices is facilitated using gRPC, REST, GraphQL APIs, and Kafka, depending on specific requirements.
• We use PostgreSQL and have our columnar time-series database for efficient event storage and retrieval at scale.

What experience or knowledge should you bring?

• You are passionate about building high-scale distributed systems.
• You care about delivering customer value and want to hear directly from your customers on how to improve and evolve your applications.
• You enjoy a collaborative development process using design discussions and code review.
• Multiple years of software engineering experience in at least one high-level programming language (Go, Java)
• Strong background in distributed data processing microservices, building high-quality, scalable data products
• Familiarity with AWS and/or GCP, Kubernetes, Docker, Postgres, Redis, Kafka (big advantage)
• Ability to swiftly delve into new products and comprehend their inner workings
• Proven capacity to collaborate effectively with both local and remote teams across various time zones
• Excellent communication skills, as you'll regularly liaise with product and other engineering teams
• A huge plus would be previous experience in developing security-related products

Why Us?

Join a cutting-edge company tackling extraordinary challenges alongside top industry talent. Enjoy flexible hybrid work in Prague (Karlin), Brno (Clubco), or remotely across CZ/SK. Only Prague-based employees are required to work from the office at least two days per week.

Competitive Benefits Package:

• Stock & Bonuses: Grant of Restricted Stock Units with a 4-year vesting plan, annual performance-based bonuses, and an employee stock purchase plan.
• Time Off & Well-being: Flexible Time Off, on top of the standard 5 weeks vacation, flexible paid sick days, fully paid Short Term Sick/Nursing Leave, 16-week parental leave, grandparent leave, and additional company holidays.
• Insurance & Health: Pension Insurance Contribution, Premium life insurance, Private medical care (for you and +1), and a Global Employee Assistance Program.
• Work Perks: Monthly meal and well-being allowance, high-end MacBook/Windows laptop, work-from-home support, and in-office refreshments.
• Growth & Community: LinkedIn Learning, internal mentoring, educational support, generous referral bonuses, and optional company events (sports, BBQs, charity).

Be part of an inclusive, innovative workplace that values belonging, flexibility, and growth!