Staff Software Development Engineer

Trellix

3d•Hybrid

About The Position

Join our innovative team at Trellix, where you'll lead the design and development of our high-performance Cloud Threat Detection Platform. In this role, you will lead the architecture and engineering of high-throughput threat analysis pipelines, submission engines, analyst web interfaces, and microservices processing millions of daily inspection requests. You will work at the intersection of execution engines, asynchronous cloud APIs, full-stack web applications, secure AWS cloud infrastructure, global security standards, and modern AI development tooling. This role is hybrid in nature with the Engineer able to commute into the Frisco, TX office 3-4 days/week.

Requirements

11+ years of professional software development experience building and operating high-throughput microservices, cloud platforms, and full-stack web architectures.
Deep, expert-level knowledge of AWS cloud architecture, compute, networking, security, and storage services for large-scale enterprise systems.
Linux proficiency is a must; Shell scripting required.
Excellent development and debugging skills in Python (FastAPI, Django, Flask)
Strong grasp of data structures, design patterns, REST, and async Web APIs handling millions of requests
Working knowledge of C and C++ for interfacing with low-level inspection engines and execution runtimes (Go preferred)
CI/CD pipeline and IaC experience (GitHub Actions, Terraform, AWS CDK, CloudFormation)
Full-stack expertise with Python Django, React, JavaScript, HTML, CSS, Bootstrap, AJAX, and jQuery.
Hands-on experience with VPCs, NAT Gateways, Security Groups, EC2 fleets, Load Balancers, S3, EFS, Lambda, API Gateway, ECS, EKS, WAF, Docker, RDS, DynamoDB, OpenSearch, Athena, and Redis.
Working knowledge of regional data isolation, privacy, and regulatory controls across US (FedRAMP), EU, APJ, and Canada.
Practical experience integrating AI tooling (e.g., Claude Code, Amazon Q, AWS Bedrock) into daily software development, code generation, refactoring, and automated code review workflows.
Solid understanding of OAuth2, JWT, SAML, SDL processes, vulnerability assessments, and FedRAMP compliance.
Working knowledge of cybersecurity threat detection processes, malware analysis pipelines, and security inspection tools.
Excellent written and verbal communication skills with the ability to operate autonomously and collaborate effectively across engineering and threat research teams.

Responsibilities

Lead the design and engineering of our Cloud Threat Detection Platform, driving core submission pipelines, high-throughput microservices, dynamic sandbox execution, and platform features from concept to production.
Build modern, responsive web application interfaces and analyst dashboards using React, Django, HTML, CSS, JavaScript, Bootstrap, AJAX, and jQuery.
Architect resilient microservices and asynchronous processing pipelines capable of handling millions of API submission requests daily with low latency.
Design, deploy, and manage secure AWS cloud environments leveraging VPC architecture, NAT Gateways, Security Groups, EC2 fleets, Load Balancers (ALB/ELB), EFS, Lambda, API Gateway, ECS, EKS, WAF, and S3 lifecycle management.
Leverage modern AI tools (including Claude Code, Amazon Q, and LLMs) to streamline code development, automate pull request and code reviews, accelerate debugging, and optimize software delivery lifecycle workflows.
Implement secure API boundaries, security exchange protocols, and identity mechanisms using OAuth2, JWT, SAML, and token exchange routines.
Enforce secure multi-region data architecture complying with FedRAMP, US, EU, APJ, and Canadian regulatory and data residency guidelines.
Design telemetry pipelines to capture, process, and visualize customer data telemetry, product health metrics, and engine-level telemetry using OpenSearch, DynamoDB, RDS, and Athena.
Ensure applications are highly resilient and secure, following strict Secure Development Lifecycle (SDL) practices, vulnerability assessments, and FedRAMP security boundary requirements.
Author detailed design docs and IaC specs while owning production issues end-to-end, including triage, root cause analysis, and SLA commitments.