Threat Investigation Engineer

Role overview Build and support backend services and AI-assisted applications used in sensitive, high-stakes threat investigations. The work combines software development with production troubleshooting and reliability ownership, in close partnership with investigators and engineering colleagues. The role includes scheduled on-call coverage, including weekends and holidays.

Responsibilities - Develop, test, and maintain backend services and AI-enabled investigation tools. - Work with investigators to understand operational needs and turn them into practical software improvements. - Integrate AI features, APIs, and services into investigation workflows. - Diagnose production incidents involving failed workflows, delays, inconsistent data, or system errors, and address underlying causes. - Improve reliability with monitoring, logging, automated tests, documentation, and operational tools. - Take engineering work from initial problem definition through implementation, deployment, and ongoing support; participate in a rotating on-call schedule.

Requirements - Strong Python and backend application development experience. - Experience building, deploying, debugging, and maintaining production software, with exposure to platform engineering, SRE, or production operations. - Familiarity with REST APIs, backend services, asynchronous processing, and system integrations. - Practical experience with AI applications, LLM APIs, or AI-assisted development tools. - Strong debugging skills, independent problem-solving ability, and clear communication with technical and nontechnical partners. - Availability for scheduled on-call coverage, including weekends and holidays, and sound judgment when working with sensitive information.

Nice to have - Background in task queues, background workers, or distributed systems; cloud services; observability and incident management; or internal workflow tools. - Experience in cybersecurity, trust and safety, threat intelligence, or other high-stakes operational work.

Benefits and work setup - Remote, full-time contract for one year; listed compensation is $160,000–$200,000. - Work may involve exposure to potentially distressing investigation material.