[Hiring] Staff Software Engineer, Security Platform @CommandLink

Role Description

CommandLink's security product turns raw security telemetry, from firewalls, endpoints, cloud audit trails, and more, into a picture an analyst can actually investigate. As a Staff Software Engineer, you'll own that surface end to end: the API and UI, the architecture behind them, and the data contracts that keep the teams feeding into it, alert, classification, and ingestion, aligned to a common standard. This is full-stack work with a strong security-domain emphasis. You'll need to reason clearly across a wide range of data sources and turn that into topology and context an analyst can actually trust and act on.

Key Responsibilities

• Own the architecture and long-term direction of the security product's API and UI, including how it consumes security telemetry and evolves as the platform grows.
• Define and enforce the data contracts between the security product and the alert, classification, and ingestion services it depends on.
• Integrate and present security telemetry across a wide range of sources (syslog, NetFlow, SNMP, firewall telemetry, OpenTelemetry, EDR, and MDR ingest) into a consistent model analysts can rely on.
• Make cloud environments and their audit trails a first-class part of the product, not an afterthought bolted on.
• Surface enriched entities, alerts, and topology in the shape security teams actually use when investigating an incident.
• Drive architectural decisions in ambiguous, cross-functional spaces where requirements are incomplete or competing, and see them through to durable outcomes.
• Set the technical patterns and standards other engineers on the team build against.
• Mentor engineers across the security product team and raise the bar for what production-grade, domain-aware work looks like at CommandLink.
• Takes on additional responsibilities and projects as needed to support the success of the team and organization.

Qualifications

• Production experience with high-volume, latency-sensitive infrastructure: distributed messaging/event streaming (e.g. Kafka) and search or indexing at scale (e.g. OpenSearch), or clear equivalents.
• Comfort with contract-driven development across teams, using schema/interface definitions like protobuf to keep multiple services honest to a shared contract.
• Broad working knowledge of security telemetry (e.g. syslog, NetFlow, SNMP, firewall telemetry, OpenTelemetry, EDR, and MDR ingest) and the judgment to reason about what those signals mean together, not just individually.
• Strong working knowledge of cloud environments and their audit trails.
• Demonstrated ability to derive usable network and system topology from diverse, sometimes messy data sources.
• A track record of owning architectural decisions in ambiguous, cross-functional spaces and driving them to durable outcomes, including influencing shared standards beyond your immediate team.
• Comfort operating with significant autonomy where requirements are incomplete or competing.
• Familiarity with security products like NDR, XDR, or similar. Understanding what they get right and wrong is the useful part, not having built the better version already.

Nice to Have

• Hands-on experience with Memgraph or other graph data platforms.
• Familiarity with stream processing frameworks such as Flink.
• Experience working with LLM-based reasoning systems, or providing structured context to LLMs for troubleshooting and investigation workflows.
• Prior work at security product companies or on analyst-facing security platforms.

Benefits

• Room to grow at a high-growth company.
• An environment that celebrates ideas and innovation.
• Your work will have a tangible impact.
• Flexible time off.
• Fun events at cool locations.
• Employee referral bonuses to encourage the addition of great new people to the team.