Senior Software Engineer (TypeScript)

Location: France; remote

Company

hirify.global is a global cybersecurity company building open-source, AI-powered solutions for Continuous Threat Exposure Management. Its OpenCRQ product quantifies cyber risk using threat intelligence, exposure validation, control effectiveness, and traceable evidence.

What you will do

• Own complex product problems from ideation and technical design through implementation, end-to-end testing, and user validation.
• Build probabilistic quantification models that turn threat frequency, control effectiveness, and asset value into reproducible and explainable loss distributions.
• Design interconnected data models and correlation layers across OpenCRQ, OpenCTI, OpenAEV, customer systems, STIX, and OCSF.
• Build observable and recoverable ingestion pipelines for hundreds of thousands of findings per tenant, including delta syncs, backfills, and imperfect timestamps.
• Define safe, explainable contracts and plain-language outputs for XTM One agents.
• Collaborate with engineering and product leaders on technical standards, integrations, and open-source engineering practices.

Requirements

• Track record of taking complex, ambiguous product problems through framing, technical decisions, implementation, end-to-end testing, and validation of user needs.
• Strong experience with a modern TypeScript stack and practical PostgreSQL knowledge beyond the ORM.
• Ability to reason about complex relationships across systems and design coherent data models as concepts and integrations evolve.
• Comfort turning quantitative concepts into maintainable software, including probability distributions, orders of magnitude, and evolving model assumptions.
• Thoughtful use of coding agents, including careful verification of their output.
• Fluent English is required.
• Expertise in cybersecurity or cyber risk is not required, and no specific expertise in every listed standard is expected.

Nice to have

• Experience in cybersecurity, GRC, or risk quantification.
• Familiarity with STIX/TAXII, OCSF, MITRE ATT&CK, or other open cybersecurity standards and frameworks.
• Experience shipping features involving LLM agents, RAG, or MCP.

Culture & Benefits

• Remote-first work with flexibility to work from the candidate’s base; the role is part of a global team across Europe, North America, APJ, and beyond.
• Competitive compensation and equity participation.
• 25 days of baseline paid time off and paid volunteer days.
• Equipment choice plus support for remote work and development needs.
• Two annual in-person gatherings: one global company event and one team event.
• CORE values of Cohesion, Openness, Responsibility, and Equity, with an open-source, inclusive, and collaborative culture.