Founding Full Stack Engineer

This role is posted on behalf of ManticoreAI, a startup supported by SGInnovate. Background ManticoreAI. Backed by leading US cybersecurity investors. Remote. High-intensity. We're an AI-native offensive security company, backed by well-known US cybersecurity investors, building what the security industry has talked about for a decade and never shipped. Pentesting today is slow, manual, and stale the day it's delivered. We rebuilt it from the ground up: AI agents that plan, exploit, pivot, and report against real customer systems the way an elite operator would, and prove what's actually exploitable instead of pattern-matching. This is the engine. Not a CVE scanner, not a vuln-feed aggregator. A multi-agent system that runs a real penetration test end to end, then produces CREST-certified, audit-grade findings that Big 4 auditors accept for SOC 2, PCI DSS, and ISO 27001. We have a five-year head start on the architecture behind it. 20 months of build. Production platform. Paying customers. We're hiring our Founding AI Engineer to own, harden, and scale that engine alongside the founder. The platform is already live and working. Your job is to make it more capable, more reliable, and faster, not to start from a blank page. This is a real shot at defining a category. Read this first. This is not a balanced-lifestyle role. We move at startup pace because the window to win this market is now, not in three years. If you want predictable hours, weekends fully off, and a calm Slack, this isn't it. If you want to take production AI agents that already break into real systems and push them further, alongside people who care obsessively about what they ship, keep reading. Job scope What You'd Own Our SaaS control plane is how customers interact with the whole platform: A mature Nuxt 4 / Vue 3 codebase — 100+ pages, hundreds of API routes, deep Supabase useMulti-tenant with RLS (including MSP / white-label mode)Stripe billing — subscriptions, credit packs, vouchers, invoicesTrigger.dev async orchestration — assessment launches, report generation, email digests, ticketing sync, certificate managementIntegrations: Jira, ServiceNow, Slack, GitHub, GitLab, Bitbucket, Azure DevOps, IDE extensions, SSO You'd also own a VPN client customers run on-prem for internal assessments. You won't be pushing huge Go features regularly — but you own the interface between it and the dashboard, and pick up Go work when it's needed. You report directly to the founder as our founding full-stack engineer on the SaaS side. You set the direction for everything frontend+backend on the SaaS, you mentor the SaaS #2 hire when they join month 5-6, and you're the second voice in the room for cross-repo architectural decisions. Who You Are Must have: 6+ years shipping TypeScript + Vue or React in productionHave owned a SaaS codebase end-to-end — not "worked on features," but "set the direction"Postgres + RLS is second nature. You can read a policy, tell me why it's slow, rewrite it correctlyBuilt multi-tenant B2B SaaS with subscription billing at least onceStrong async JS / Node server-side, Stripe (or comparable billing) Nice to have: Nuxt 4 specifically (otherwise ~2 weeks to ramp from React)Cloudflare Workers experienceSupabase (vs. roll-your-own Postgres)Go for the connector work (learnable if motivated)Trigger.dev or comparable background job systemsOffensive security background or strong interest Filters: You use AI tooling daily (Claude Code, Cursor, Copilot). Skeptics about AI in dev workflow won't enjoy this codebase.Strong written English (async-first team)You read docs and update them. Our codebase is heavily documented and we expect contributors to keep it that way. How you use the docs in the take-home tells us a lot. Tech Stack Nuxt 4 SPA (SSR-disabled) on Cloudflare Workers. Vue 3 + Pinia + Vue Query. Supabase Postgres with deep RLS. Trigger.dev for async. Stripe for billing. Sentry + Langfuse for observability. Vitest + Playwright + pgTAP for testing. You'll also occasionally touch Go (the on-prem connector) and Python (cross-repo coordination with the scanner team). What This Isn't A frontend-only role. You own server + DB + client.A ticket-taking role. You decide what ships next, and often why.An "AI engineer" role. Our AI agents live in the scanner side of the platform. You'll consume their outputs; you won't tune agent prompts.A balanced-lifestyle role. We work hard. Long days, customer escalations on weekends sometimes, ship-it-tonight when something's broken. If that drains you, this isn't a fit. If it energizes you, you'll thrive here. Level of relevant working experience 6 - 10 years Required Skills Cloud ComputingTypescriptPostgreSQLSoftware DevelopmentGitPythonAPI DevelopmentReactDesign Patternstesting Interested applicants may apply directly to DTC at: https://central.sginnovate.com/hub/marketplace/openings/c0899c35-6a78-4998-baeb-e5d127038b7d?filter=ALL&keyword=manticore