Associate Full Stack Engineer

We're looking for a Full Stack Engineer to join a cyber security company in Bahrain that receives a very large volume of security telemetry from many customers, The platform runs automated analysis, gives our operations teams the tools to reach and act on decisions. The platform serves many customers from a single deployment, so every pipeline stage has to hold up under strict tenant isolation, bursty traffic, third-party rate limits, and partial failure. The engineering problems are, first and foremost, distributed systems problems.

The team is small and senior in outlook. Engineers ship to production, own what they ship, and work directly with the operations teams who use the product every day. We hire for engineering quality above everything else. You will build production components of the platform from your first month, paired with a senior engineer who owns the subsystem you work in, and you will grow toward owning one yourself. This is not a junior role in the usual sense. We are looking for someone early in their career who has already shown they operate above their level, and who wants hard systems problems rather than glue code.

Role Requirements:

• Two or more years writing production software in TypeScript on Node.js or in Python, with a working command of the other.
• Hands-on experience with a system that had real scale. You contributed to, and can explain in detail, a service that handled sustained high throughput, large data volumes, or many concurrent tenants. You need not have designed it, but you must know why it was built the way it was and where its limits were.
• A proven record of excellence, evidenced by at least one of: graduating at the top of your cohort from a strong program; a competitive programming or security capture-the-flag ranking; meaningful contributions to a widely used open-source project; an early promotion or an outsized ownership grant at a previous employer; a shipped feature with a measured business or reliability outcome you can describe.
• Solid fundamentals: data structures, concurrency and asynchronous programming, HTTP and REST, relational and document databases, message queues.
• Discipline: you write tests without being asked, you read the code you depend on, and your pull requests explain the why.
• Clear written communication in English. Much of our design work happens in documents and pull request threads.

• Exposure to cyber-security: log analysis, endpoint-detection tooling, the MITRE ATTACK framework, or a security-focused degree or certification
• Used a workflow orchestration engine or a streaming platform in production.
• Deployed to Kubernetes and debugged a pod that would not start.
• Integrated with a third-party API that had strict rate limits and lived to tell the tale.
• No security background required. You'll learn how defenders think and how attacks unfold.