We are building a new capability that turns fragmented, noisy security logs into explainable, AI-powered threat analysis, delivered inside the RedMimicry platform.
Tasks
As a Software Developer at RedMimicry, you will take a leading role in developing a new security analytics capability within our platform. You will build Go backend components and the application layer.
Build the Analysis Backend: Implement the services that receive security telemetry, run analysis workflows, and store results and evidence.
Design APIs: Define stable, versioned interfaces for ingestion, analysis, and reporting.
Design Domain Models: Define maintainable data models for security events, analysis results, and supporting evidence.
Handle Long-Running Jobs: Implement asynchronous processing, progress reporting, retries, cancellation, and useful failure states.
Work at Volume: Move and process large telemetry sets with predictable memory, throughput, and backpressure behaviour.
Integrate Model Inference: Build the interfaces between our services and our AI/ML components, including queuing, timeouts, partial results, and fallbacks.
Keep Evidence Traceable: Preserve the path from an analysis result back to the exact source fields and log fragments behind it.
Implement Reporting: Build consistent JSON and PDF reporting pipelines for machine-readable and human-readable outputs.
Maintain Engineering Quality: Add tests, review code, document interfaces, profile performance, and translate analyst feedback into concrete improvements.
Requirements
Experience with web frontend frameworks is welcome, but not required for this role.
Go
Strong practical Go experience and a clear sense of idiomatic Go
Concurrency with goroutines, channels, and context, including cancellation and timeouts
Profiling, benchmarking, and reasoning about allocations and memory
Confident use of the standard library and a deliberate approach to dependencies
Backend Engineering
API design, versioning, validation, and error handling
Relational data modelling and SQL
Asynchronous jobs, queues, background processing, and failure recovery
Testing and observability
System Design
Service boundaries, event-driven workflows, and integration patterns
Authentication, authorisation, and tenant isolation
Containerised applications and production deployment workflows
Performance and reliability under large data volumes
Reporting and Data Presentation
JSON APIs and machine-readable exports
PDF or document-generation pipelines
Audit-oriented or evidence-oriented data structures are a plus
Cybersecurity Knowledge
Experience with SOC tooling, SIEM, EDR, incident response, threat hunting, or security analytics is a strong advantage
Ability to understand process, host, identity, network, and timeline data
Frontend (welcome, but not required)
Modern JavaScript or TypeScript and a component-based framework
Languages
English (required)
German (a plus)
Benefits
This is a fixed term contract, running until 2.
Work from anywhere in Germany, and use our Berlin office as often as you like
30 days of paid time off, and a quiet inbox while you are away
Company-paid Deutschlandticket
Annual budget for the courses and certifications you pick yourself
Modern tooling and extensive use of AI
Light process, clear communication, focus on what really matters
A close match is enough. We are an equal opportunity employer and welcome applications from all backgrounds and genders. Questions about the role or the process are welcome at any point.
Contact
If the role speaks to you, apply with your CV and anything else you would like us to see. What follows is short and transparent, a few conversations with the team and then your first week in Berlin.
We show an excerpt and a link, and the full text when the source allows it. Brands and logos shown belong to their owners.
