Software Developer (Go) - Security Analytics in Berlin

We are building a new capability that turns fragmented, noisy security logs into explainable, AI-powered threat analysis, delivered inside the RedMimicry platform.

As a Software Developer at RedMimicry, you will take a leading role in developing a new security analytics capability within our platform. You will build Go backend components and the application layer. Experience with web frontend frameworks is welcome, but not required for this role.

Location: Mostly remote (within Germany), with monthly in-person collaboration at our Berlin office

Hours: Full-time, 40 hours per week

Contract: Fixed-term

What You’ll Do:

• Build the Analysis Backend: Implement the services that receive security telemetry, run analysis workflows, and store results and evidence.
• Design APIs: Define stable, versioned interfaces for ingestion, analysis, and reporting.
• Design Domain Models: Define maintainable data models for security events, analysis results, and supporting evidence.
• Handle Long-Running Jobs: Implement asynchronous processing, progress reporting, retries, cancellation, and useful failure states.
• Work at Volume: Move and process large telemetry sets with predictable memory, throughput, and backpressure behaviour.
• Integrate Model Inference: Build the interfaces between our services and our AI/ML components, including queuing, timeouts, partial results, and fallbacks.
• Keep Evidence Traceable: Preserve the path from an analysis result back to the exact source fields and log fragments behind it.
• Implement Reporting: Build consistent JSON and PDF reporting pipelines for machine-readable and human-readable outputs.
• Build Secure Multi-Tenant Components: Apply authentication, authorisation, tenant separation, and secure data-handling patterns.
• Maintain Engineering Quality: Add tests, review code, document interfaces, profile performance, and translate analyst feedback into concrete improvements.

Skills:

• Go
  • Strong practical Go experience and a clear sense of idiomatic Go
  • Concurrency with goroutines, channels, and context, including cancellation and timeouts
  • Profiling, benchmarking, and reasoning about allocations and memory
  • Confident use of the standard library and a deliberate approach to dependencies
• Backend Engineering
  • API design, versioning, validation, and error handling
  • Relational data modelling and SQL
  • Asynchronous jobs, queues, background processing, and failure recovery
  • Testing and observability
• System Design
  • Service boundaries, event-driven workflows, and integration patterns
  • Authentication, authorisation, and tenant isolation
  • Containerised applications and production deployment workflows
  • Performance and reliability under large data volumes
• Reporting and Data Presentation
  • JSON APIs and machine-readable exports
  • PDF or document-generation pipelines
  • Audit-oriented or evidence-oriented data structures are a plus
• Cybersecurity Knowledge
  • Experience with SOC tooling, SIEM, EDR, incident response, threat hunting, or security analytics is a strong advantage
  • Ability to understand process, host, identity, network, and timeline data
• Frontend (welcome, but not required)
  • Modern JavaScript or TypeScript and a component-based framework
• Languages
  • English (required)
  • German (a plus)

You do not need to meet every requirement to apply. Go and backend judgement are what count here, most of the rest can be picked up on the job.

Other Requirements:

• Existing legal right to work in Germany and primary residence in Germany
• Clean criminal record certificate
• Willingness to travel to the Berlin office approximately once per month