Senior Software and Architecture Engineer

OSec•New York, NY

3d•Hybrid

About The Position

We’re hiring a Senior Software and Architecture Engineer for a hybrid position, preferring someone based in New York City, but considering strong candidates on the East Coast. This hands-on technical leadership role will lead architectural decisions, set technical direction, and mentor teammates while contributing to the codebase. The position supports a CTEM platform, with existing services built using Django (Python) and React (TypeScript) and hosted on AWS, alongside many additional services to build. This is a startup environment where engineers take ownership, move with urgency, make decisions under pressure, and collaborate closely with penetration testers and the business. The role involves integrating open-source security tooling, which may be written in languages outside the core stack. CTEM experience is a plus but is not required.

Requirements

15+ years of relevant professional software engineering experience.
Comfort taking the lead on technical decisions and project direction.
Strong understanding of Django and the Django REST Framework.
Proficiency across the Python ecosystem.
Experience with TypeScript / JavaScript (React).
Experience with relational databases, including PostgreSQL.
Experience with AWS, including EC2, EBS, Lambda, and ECS.
Excellent spoken and written communication skills.
Ability to collaborate with penetration testers and business teams, take ownership, and make decisions under pressure.

Nice To Haves

CTEM platform experience.
Experience across a range of programming languages and an appetite for learning languages used by open-source security tools.
API design and documentation experience.
Experience with message processing and queueing systems.
Experience with penetration testing tools such as Nuclei and Nmap.

Responsibilities

Lead the design and implementation of solutions and tooling for the CTEM platform.
Own key architectural decisions and guide the technical direction of new services.
Collaborate closely with penetration testing teams and the business to ensure tools are effective and deliver meaningful information to assessment teams in the field.
Mentor and support other engineers while remaining hands-on in the codebase.
Integrate open-source security tooling, including tools written in languages outside the core stack.