Backend Engineer

Pi Security•San Francisco, CA

11h

About The Position

Pi is building an agentic product security platform for teams that need to secure software at the speed they build it. Modern development is accelerating, but security knowledge is still scattered across code, tickets, documents, incidents, reviews, and the people who remember why decisions were made. Pi turns that context into institutional security memory, helping teams triage faster, remediate in context, prevent repeat vulnerability classes, and embed security guardrails where engineering work already happens. We are building for a future where security is not a blocker at the end of the development process. It is part of how software gets designed, reviewed, shipped, and improved. Read about Pi Security on Forbes! We are looking for a Backend Software Engineer to build core product features across Pi’s agentic security platform. You will work on APIs, agentic workflows, business logic, data models, integrations, and backend systems that power security analysis, remediation workflows, code intelligence, and customer-facing product behavior. Your work will help engineering and security teams understand risk, act on findings, preserve institutional security context, and prevent the same vulnerability classes from recurring. This is an application engineering role, not a pure infrastructure role. You will spend most of your time designing product behavior, implementing backend systems, shaping data flows, and making complex workflows reliable, observable, and understandable.

Requirements

Strong backend application engineering experience.
Experience building production APIs and business logic in TypeScript and/or Python.
Strong product judgment: you can translate ambiguous product needs into clear backend models, APIs, and workflows.
Experience with relational databases, schema design, migrations, query performance, and data consistency.
Comfort working with async systems, background workers, queues, workflow engines, or distributed jobs.
Ability to debug complex behavior across API, worker, database, and third-party integration boundaries.
Strong security instincts around authorization, tenant isolation, secret handling, input validation, and data exposure.
Clear communication and good engineering taste around abstractions, ownership boundaries, and maintainability.
Ability to work in a fast-moving startup environment with ownership, autonomy, and good judgment.

Nice To Haves

Experience building AI-agent or LLM-backed product workflows.
Experience with durable workflow engines.
Experience with security products, developer tools, code analysis, cloud security, or infrastructure security.
Familiarity with multi-tenant SaaS systems.
Experience designing APIs consumed by rich frontend applications.
Comfort working in a monorepo with shared TypeScript and Python systems.
Experience supporting systems that process code, security findings, infrastructure metadata, or customer-specific context.

Responsibilities

Build product features across our backend application stack.
Design and implement APIs using modern TypeScript and Python backend frameworks.
Build business logic for findings, integrations, security workflows, reporting, user actions, and analysis pipelines.
Implement async and agentic workflows using durable workflow systems and worker services.
Work with AI-assisted systems that analyze code, cloud resources, pull requests, security findings, and customer context.
Model and query application data using relational databases, vector search, ORMs, and migration tooling.
Integrate with external systems such as source control, ticketing, collaboration, documentation, cloud, and security platforms.
Build backend workflows that inspect customer codebases and infrastructure context safely and reliably.
Build reliable background jobs, retries, state transitions, audit trails, and operational visibility.
Partner with frontend, platform, security, and product teams to ship complete customer-facing workflows.
Help create backend systems that let customers move faster without losing security context, control, or trust.