Backend Security Engineer

Backend Security Engineer

Job Description

Backend Engineer – Secrets Portal

Role Summary

We are looking for an experienced Backend Engineer to drive the evolution of our Go-based detection platform. In this role, you will build and maintain high-throughput consumer pipelines (YARA/YARA-X), secure secrets management workflows (Vault/KMS), and resilient asynchronous orchestration. You will work at the intersection of backend systems, cryptography, and data engineering to deliver scalable security solutions.

Key Responsibilities
Platform Development: Maintain and extend a high-performance detection platform comprising consumer rule processors (YARA/YARA-X), event producers, APIs, and asynchronous workflows.
Secrets Management: Own the design and operation of Vault-backed secrets flows and encryption proxies (KMS); review and harden key usage patterns and remediation lifecycles.
Data & Storage: Implement and optimize Postgres schema migrations and query performance. Integrate search capabilities (Solr/Lucene) when required.
Reliability & Scale: Troubleshoot high-throughput pipelines (Kafka/Benthos), ensuring idempotency, backpressure handling, and effective instrumentation (traces/metrics).
Engineering Excellence: Improve test coverage (unit, integration, golden tests), refine CI/CD pipelines (golangci-lint), and optimize Docker-based developer workflows.

Qualifications (About You)
Experience: 5+ years of software development experience.
Technical Depth: Strong proficiency in core development platforms (specifically Go) with deep domain knowledge in package-specific configuration and deployment.
Problem Solving: Ability to design new testing methods and resolve complex technical issues with minimal assistance.
Communication: Clearly communicates Agile concepts to partners and demonstrates a commitment to team priorities.
Impact: Delivers high-performance, scalable, and secure solutions with broad impact (high throughput/low latency). Understands the downstream impact of work on the team and guests.
Continuous Learning: Stays current with evolving technologies via formal training and self-directed education.

Required Technical Skills
Language: 4+ years writing production Go services, modules, and tests.
Security & Crypto: 2+ years designing/operating Vault integrations and KMS-style key handling, including secure key lifecycles.
Detection Engines: Practical experience with YARA/YARA-X or similar pattern engines. Familiarity with string-search algorithms (e.g., Aho–Corasick) is a plus.
Databases: 3+ years Postgres experience (migrations, indexing, tuning).
Streaming: Experience with Kafka (or similar) stream-processing patterns; comfort with Benthos or equivalent.
Infrastructure: Proficiency with Docker/Docker Compose, Dockerfile optimization, and Makefile-driven workflows.
Observability: Basic knowledge of OpenTelemetry, distributed tracing, and metrics instrumentation.

Nice-to-Have:
Experience with Temporal or similar workflow orchestration engines.
Solr/Lucene search tuning exposure.
LDAP/OIDC integration experience.
Deep knowledge of pattern-matching algorithm performance trade-offs.

Experience:
5 - 25 years

Notes:
Hybrid

VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.