Software Engineer II (Backend)

Accountabilities • Own small-to-medium backend API features end to end, from technical design and implementation through launch, monitoring, and iteration.

• Build and extend public REST and gRPC APIs supporting Exposure Management and Supplier Risk Intelligence.

• Develop risk event endpoints that enable SIEM integrations with platforms such as Splunk, Google SecOps, and Microsoft Sentinel.

• Collaborate with frontend engineers and product stakeholders to define API contracts, filtering, pagination, and response structures.

• Integrate data and services from other engineering teams using gRPC and Google Cloud Pub/Sub, establishing interfaces that can evolve reliably.

• Analyze and optimize API performance through PostgreSQL query planning, indexing, caching, and payload improvements.

• Write automated tests, implement observability, and take responsibility for releases and on-call support for services delivered.

• Incorporate customer feedback into technical and product discussions.

• Support the development of interns and less experienced engineers through collaboration and knowledge sharing.

Requirements:

• At least 4 years of professional software engineering experience building backend services.

• Production experience with Go, or strong experience in another backend language such as Python or Java, with the ability and motivation to become proficient in Go.

• Experience designing and consuming REST or gRPC APIs, preferably for frontend applications.

• Strong SQL skills and practical knowledge of relational data modeling, database indexing, and query performance.

• Demonstrated ability to build maintainable software, including automated tests integrated into CI, meaningful monitoring and alerting, and thoughtful code reviews.

• Clear written and verbal communication skills, with the ability to collaborate effectively with engineers, product managers, and cross-functional teams.

• A proactive, action-oriented approach to problem-solving, with a willingness to learn new domains, tools, and technologies.

• Nice to have: Experience with cybersecurity products, particularly attack surface management, third-party risk, or vulnerability management.

• Experience building APIs for external developers or partners, including OpenAPI specifications, versioning, and webhooks.

• Familiarity with event-driven systems such as Google Cloud Pub/Sub or Kafka, including idempotency and retry patterns.

• Experience deploying containerized services on Kubernetes in Google Cloud Platform or AWS.

• Familiarity with AI coding tools and their use in improving software development workflows.

• Working knowledge of Internet technologies, including DNS record types, WHOIS, and Certificate Subject Alternative Names (SANs).

Benefits:

• Remote work opportunity for candidates based in Canada or the continental United States.

• Competitive compensation package. The Canadian salary range is not specified in the posting.

• For eligible U.S. locations, published annual salary ranges are:

• USD $137,000–$164,000 for high-cost areas, including the San Francisco Bay Area, New York City, and Seattle.

• USD $116,450–$140,500 for other U.S. locations.

• Bonus eligibility and equity for eligible positions.

• Benefits effective from the first day of employment.

• 401(k) matching.

• Health, vision, and dental coverage.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1