Senior Software Engineer, Threat Intelligence

Salary: £80,000 - £120,000, plus meaningful equity.Location: Remote, preferably UK or US About Infrawatch Infrawatch is building the infrastructure intelligence layer for the public internet. Our technology helps some of the world’s most advanced organisations detect cyberattacks, fraud, scams, and online abuse before they become a threat. Customers use Infrawatch to uncover the infrastructure behind malicious activity, identify emerging threats, investigate complex incidents, and make decisions using intelligence that previously did not exist. Our platform continuously observes, processes, enriches, and serves data about the public internet. Today, we process more than 23.5 billion primary-source events every day across IP addresses, domains, DNS, certificates, exposed services, and internet activity. The engineering challenge is not simply one of scale. Internet data is constantly changing, frequently incomplete, and sometimes deliberately deceptive. We have to transform that data into intelligence that is accurate, searchable, explainable, and available through fast, reliable products and APIs. We are a small, highly capable team building technology that competes globally. Engineers at Infrawatch work on systems customers depend on today while helping design the architecture we will need for what comes next. This is a high-trust, high-accountability environment. Expectations are clear, engineers own what they build, and strong ideas can move quickly from discussion into production. There are no layers of bureaucracy and very little distance between discovering an important problem and shipping the system that solves it. For the right person, this is an opportunity to join early, take meaningful ownership, and help build the technical foundations of a category-defining company. The RoleWe are looking for a Senior Software Engineer with strong Golang experience to help design, build, and operate the systems powering the Infrawatch platform. This role sits at the intersection of distributed systems, large-scale data engineering, API design, and cybersecurity. You will work across both the data platform that processes tens of billions of events each day and the services through which customers search, investigate, and integrate with that intelligence. This is not a narrowly defined API position or a traditional data engineering role. You will work across ingestion, streaming, processing, orchestration, storage, indexing, APIs, and customer-facing backend services. You will make pragmatic decisions about throughput, latency, correctness, reliability, observability, and cost. You will then take ownership of those decisions in production. The role is deeply hands-on. You will write production Go, investigate difficult failures, improve existing systems, and design new services as the scale and complexity of the platform continue to grow. What You Will Work On Build systems at internet scaleYou will design and operate high-performance services responsible for ingesting and processing large volumes of internet infrastructure data. This includes real-time streaming systems, large-scale batch pipelines, transformation and enrichment workflows, deduplication, aggregation, classification, and the safe replay or reprocessing of billions of records. Create the customer-facing intelligence layerYou will build reliable, low-latency APIs and backend services used by customers, integrations, internal platform components, and investigative workflows. You will help determine how extremely large intelligence datasets should be modelled, indexed, searched, retrieved, and presented through dependable product interfaces. Improve our distributed data platformYou will work extensively with technologies including Kafka, ClickHouse, Elasticsearch, Redis, and Docker. You will improve partitioning, query performance, storage efficiency, workload isolation, failure recovery, and the movement of data between systems. You do not need previous experience with every technology we use. What matters is that you understand the engineering principles underneath them and can apply that knowledge to unfamiliar systems. Operate what you buildEngineers at Infrawatch remain close to production. You will investigate failures across distributed systems, improve observability and operational visibility, design for partial failure, and ensure systems recover safely from retries, duplicates, ordering issues, backpressure, and interrupted processing. You will be expected to understand not only whether a system works, but how it behaves under load, how it fails, how much it costs, and how quickly it can be restored. Shape the future of the platformYou will work directly with the founder and the wider engineering team to shape the company’s technical direction. You will help establish the architecture, engineering practices, and operating standards required for the next stage of Infrawatch’s growth. Important technical problems will not arrive as perfectly defined tickets. You will be trusted to understand the underlying need, evaluate the trade-offs, propose an approach, and carry the work from design through to production. Our TechnologyOur backend and data platform is built primarily in Go and currently makes extensive use of: KafkaClickHouseElasticsearchRedisDocker Our technology choices will continue to evolve. We care more about strong engineering judgement and an understanding of underlying systems than experience with one exact combination of tools. What We Look ForThe strongest candidates will have substantial experience building and operating production software in Go, particularly systems where performance, reliability, and correctness matter. You should be comfortable designing backend services and APIs, working with distributed data systems, and reasoning about the behaviour of event-driven architectures in production. Y ou understand that building the happy path is only part of the job and can design for retries, duplicates, ordering, backpressure, reprocessing, partial failures, and changing requirements. You will likely have experience in several of the following areas: Designing and operating production backend services and APIs.Building high-throughput streaming or batch-processing systems.Working with Kafka, ClickHouse, Elasticsearch, Redis, or comparable technologies.Designing data ingestion, transformation, enrichment, storage, indexing, and serving systems.Modelling and partitioning large datasets for reliable, performant querying.Building observability, recovery, and operational tooling into critical services.Maintaining API compatibility while products and underlying datasets evolve. Just as importantly, you should be able to take ownership of complex and ambiguous problems, communicate your reasoning clearly, and make pragmatic technical decisions without unnecessary ceremony. We value engineers who care deeply about the quality and maintainability of their work, but who also understand when to simplify, when to iterate, and when a problem requires a more durable solution. Particularly Relevant ExperienceYou may be especially well suited to the role if you have experience: Processing billions of events or records per day.Building high-volume or enterprise-facing APIs.Operating large Kafka, ClickHouse, or Elasticsearch deployments.Working with internet, DNS, network telemetry, cybersecurity, or threat intelligence data.Building products for fraud prevention, abuse detection, threat hunting, or security investigations.Developing data products used directly by enterprise customers.Working in an early-stage company where engineers have broad ownership.Delivering a significant improvement to the performance, cost, or reliability of a production platform. These are advantages rather than strict requirements. We are more interested in what you have built, how you approach difficult engineering problems, and the level of ownership you are ready to take. Life at InfrawatchInfrawatch is a fast-moving company, but speed does not mean chaos. We set clear expectations, trust capable people to make decisions, and expect engineers to take responsibility for the systems they own. The work is challenging and the standards are high, but individual contributions are visible and meaningful. You will work closely with a small team rather than through layers of management. You will have direct access to the people making product and company decisions, and you will be able to influence both. We want people who enjoy building, who are curious about how the internet really works, and who take pride in solving problems that most engineering teams will never encounter. LocationThis is a remote position within preferably UK or US, with occasional in-person team meetups. Applicants must already have the right to work in the UK without sponsorship. We are unable to provide visa sponsorship for this role. Salary and Equity£80,000 - £120,000, plus meaningful equity. Compensation within and above this range will depend on experience, technical depth, and the level of ownership you are able to take. Hiring Process We keep the process lightweight, technical, and focused on understanding how you think and what you have built. Initial conversation: 45 to 60 minutes A discussion about your experience, the systems you have worked on, what you are looking for, and what we are building at Infrawatch. Technical interview: approximately 60 minutes A practical discussion covering backend systems, APIs, distributed data platforms, architecture, production reliability, and examples from your previous work. We are interested in how you approach engineering decisions rather than rehearsed algorithm questions. Culture interview: approximately 30 minutes Final conversation with the Founder: approximately 60 minutes A discussion about ownership, working within an early-stage company, the direction of Infrawatch, and what we could build together. We aim to move quickly, communicate clearly, and respect the time of every candidate.