Senior Software Engineer - OpenCRQ
Level inferred from job title
Job description
Senior Software Engineer joining OpenCRQ, Filigran's cyber risk quantification product, as its fourth engineer. The role spans the data model, backend and product surface, turning threat data into traceable financial risk estimates.
At a glance
- Employment
- Full-time
- Work mode
- Remote · France
- Languages
- English – fluent
What you'll do
- Take product problems from early ideation and technical design through implementation, end-to-end testing and validation with users.
- Turn threat frequency, control effectiveness and asset value into probabilistic loss distributions; build general-purpose quantitative models that evolve without losing reproducibility or explainability.
- Model complex relationships across OpenCRQ, OpenCTI, OpenAEV and customer systems; map threat intelligence (intrusion sets, techniques, campaigns, observations) to assets, vulnerabilities, exposures and control coverage.
- Adapt OpenCRQ to open standards and schemas such as STIX and OCSF without coupling the product to a single representation.
- Process hundreds of thousands of findings per tenant through delta syncs, long-running backfills and feeds with imperfect timestamps; design observable, recoverable pipelines and extend tenant isolation.
- Design the contracts used by XTM One agents and the plain-language explanations behind risk figures.
- Contribute to the open-source release and to engineering practices the growing squad can build on.
What we're looking for
- A track record of taking complex product problems from an ambiguous idea to a validated outcome: framing the problem, making technical decisions, implementing the solution, testing it end to end and checking that it solves the user's need.
- Strong experience with a modern TypeScript stack and practical knowledge of PostgreSQL beyond the ORM; treats failure modes and observability as part of the design.
- Ability to reason about complex relationships across systems and design interconnected data models that remain coherent as concepts and integrations evolve.
- Comfort turning quantitative concepts into maintainable software; willingness to work with probability distributions, orders of magnitude and models whose assumptions evolve over time.
- Thoughtful use of coding agents, knowing where they accelerate engineering and where their output needs careful verification.
- Fluent English is required.
Nice to have
- Experience in cybersecurity, GRC or risk quantification.
- Familiarity with STIX/TAXII, OCSF, MITRE ATT&CK or other open cybersecurity standards and frameworks.
- Experience shipping features involving LLM agents, RAG or MCP.
Your team
OpenCRQ squad
Two senior engineers and a staff engineer, reporting to OpenCRQ's Engineering Manager; collaborates with the VP of Technology, CTO and Principal Engineers, and with the OpenCTI, OpenAEV and XTM One teams.
Benefits
Set up for success: choose the equipment that works for you, with additional support for remote work and development needs
- Competitive compensation + equity
- Remote-first flexibility
- 25 days PTO baseline
- Volunteer days
- Two annual in-person get-togethers: one global company get-together and one team get-together
Apply
About Filigran
Empower defense teams to be proactive through open-source solutions that uncover threats and drive action
Founded in 2022, Filigran is a global cybersecurity company with an open-source, AI-powered and threat-informed approach to Continuous Threat Exposure Management (CTEM). Its eXtended Threat Management (XTM) platform brings together threat intelligence, exposure validation and cyber risk reduction.
Mission
Empower defense teams to be proactive through open-source solutions that uncover threats and drive action, uniting defenders into a global community to make security more open, resilient and collaborative.
Key facts
- 2022
- Cybersecurity
- Founded in 2022
- Open-source, AI-powered and threat-informed approach to Continuous Threat Exposure Management (CTEM)
- XTM platform brings together threat intelligence, exposure validation and cyber risk reduction
- Products include OpenCTI, OpenAEV, XTM One and OpenCRQ
- Fast-growing, global and remote-first company
- CORE values: Cohesion, Openness, Responsibility and Equity
What they value
- Cohesion
- Openness
- Responsibility
- Equity