Software Engineer II (Backend)

Accountabilities

• Own small-to-medium backend API features end to end, from technical design and implementation through launch, monitoring, and iteration.

• Build and extend public REST and gRPC APIs supporting Exposure Management and Supplier Risk Intelligence.

• Develop risk event endpoints that enable SIEM integrations with platforms such as Splunk, Google SecOps, and Microsoft Sentinel.

• Collaborate with frontend engineers and product stakeholders to define API contracts, filtering, pagination, and response structures.

• Integrate data and services from other engineering teams using gRPC and Google Cloud Pub/Sub, establishing interfaces that can evolve reliably.

• Analyze and optimize API performance through PostgreSQL query planning, indexing, caching, and payload improvements.

• Write automated tests, implement observability, and take responsibility for releases and on-call support for services delivered.

• Incorporate customer feedback into technical and product discussions.

• Support the development of interns and less experienced engineers through collaboration and knowledge sharing.

Requirements:

• At least 4 years of professional software engineering experience building backend services.

• Production experience with Go, or strong experience in another backend language such as Python or Java, with the ability and motivation to become proficient in Go.

• Experience designing and consuming REST or gRPC APIs, preferably for frontend applications.

• Strong SQL skills and practical knowledge of relational data modeling, database indexing, and query performance.

• Demonstrated ability to build maintainable software, including automated tests integrated into CI, meaningful monitoring and alerting, and thoughtful code reviews.

• Clear written and verbal communication skills, with the ability to collaborate effectively with engineers, product managers, and cross-functional teams.

• A proactive, action-oriented approach to problem-solving, with a willingness to learn new domains, tools, and technologies.

• Nice to have: Experience with cybersecurity products, particularly attack surface management, third-party risk, or vulnerability management.

• Experience building APIs for external developers or partners, including OpenAPI specifications, versioning, and webhooks.

• Familiarity with event-driven systems such as Google Cloud Pub/Sub or Kafka, including idempotency and retry patterns.

• Experience deploying containerized services on Kubernetes in Google Cloud Platform or AWS.

• Familiarity with AI coding tools and their use in improving software development workflows.

• Working knowledge of Internet technologies, including DNS record types, WHOIS, and Certificate Subject Alternative Names (SANs).

Benefits:

• Remote work opportunity for candidates based in Canada or the continental United States.

• Competitive compensation package. The Canadian salary range is not specified in the posting.

• For eligible U.S. locations, published annual salary ranges are:

  • USD $137,000–$164,000 for high-cost areas, including the San Francisco Bay Area, New York City, and Seattle.

  • USD $116,450–$140,500 for other U.S. locations.

  • Bonus eligibility and equity for eligible positions.

  • Benefits effective from the first day of employment.

  • 401(k) matching.

  • Health, vision, and dental coverage.