We are building a new capability that turns fragmented, noisy security logs into explainable, AI-powered threat analysis, delivered inside the RedMimicry platform.

As a Software Developer at RedMimicry, you will take a leading role in developing a new security analytics capability within our platform. You will build Go backend components and the application layer.

Experience with web frontend frameworks is welcome, but not required for this role.

This is a fixed term contract, running until 2027-10-31.

Tasks

• Build the Analysis Backend: Implement the services that receive security telemetry, run analysis workflows, and store results and evidence.
• Design APIs: Define stable, versioned interfaces for ingestion, analysis, and reporting.
• Design Domain Models: Define maintainable data models for security events, analysis results, and supporting evidence.
• Handle Long-Running Jobs: Implement asynchronous processing, progress reporting, retries, cancellation, and useful failure states.
• Work at Volume: Move and process large telemetry sets with predictable memory, throughput, and backpressure behaviour.
• Integrate Model Inference: Build the interfaces between our services and our AI/ML components, including queuing, timeouts, partial results, and fallbacks.
• Keep Evidence Traceable: Preserve the path from an analysis result back to the exact source fields and log fragments behind it.
• Implement Reporting: Build consistent JSON and PDF reporting pipelines for machine-readable and human-readable outputs.
• Build Secure Multi-Tenant Components: Apply authentication, authorisation, tenant separation, and secure data-handling patterns.
• Maintain Engineering Quality: Add tests, review code, document interfaces, profile performance, and translate analyst feedback into concrete improvements.

Requirements

• Go

• Strong practical Go experience and a clear sense of idiomatic Go

• Concurrency with goroutines, channels, and context, including cancellation and timeouts

• Profiling, benchmarking, and reasoning about allocations and memory

• Confident use of the standard library and a deliberate approach to dependencies

• Backend Engineering

• API design, versioning, validation, and error handling

• Relational data modelling and SQL

• Asynchronous jobs, queues, background processing, and failure recovery

• Testing and observability

• System Design

• Service boundaries, event-driven workflows, and integration patterns

• Authentication, authorisation, and tenant isolation

• Containerised applications and production deployment workflows

• Performance and reliability under large data volumes

• Reporting and Data Presentation

• JSON APIs and machine-readable exports

• PDF or document-generation pipelines

• Audit-oriented or evidence-oriented data structures are a plus

• Cybersecurity Knowledge

• Experience with SOC tooling, SIEM, EDR, incident response, threat hunting, or security analytics is a strong advantage

• Ability to understand process, host, identity, network, and timeline data

• Frontend (welcome, but not required)

• Modern JavaScript or TypeScript and a component-based framework

• Languages

• English (required)

• German (a plus)

Benefits

• Work from anywhere in Germany, and use our Berlin office as often as you like
• 30 days of paid time off, and a quiet inbox while you are away
• Company-paid Deutschlandticket
• Annual budget for the courses and certifications you pick yourself
• Modern tooling and extensive use of AI
• Light process, clear communication, focus on what really matters

A close match is enough. If the role speaks to you, apply with your CV and anything else you would like us to see. What follows is short and transparent, a few conversations with the team and then your first week in Berlin. We are an equal opportunity employer and welcome applications from all backgrounds and genders. Questions about the role or the process are welcome at any point.