Backend Engineer

Nebulock is an agentic threat hunting platform that autonomously surfaces behaviors, not just IOCs, from various data sources. Nebulock acts like a teammate: a 24/7 AI threat hunter that investigates hypotheses, reasons through telemetry, and learns from an environment. Today, threat hunting is broken. Security teams spend weeks chasing alerts, writing detections by hand, and manually validating findings often just to confirm what their existing tools already flagged. Meanwhile, attackers exploit credentials, move laterally, and operate in silence. Nebulock flips the model. We continuously and autonomously hunt across endpoint, identity, and cloud telemetry. We identify the subtle behavioral signals that point to credential misuse, lateral movement, insider threats, and post-access activity. Then we turn those hunts into hardened, behavior-based detections automatically.

As a Backend Engineer at Nebulock, you will own the core systems that form the foundation upon which Nebulock is built. You’ll co-own the data ingestion, transformation, and search layers that power threat hunting and detection engineering workflows for our customers. We currently ingest terabytes of data per day. This role is ideal for engineers who love bringing clarity and order to messy, disparate, and large-scale datasets.

• Design, build, and maintain scalable systems that ingest and process large volumes of security telemetry (TBs / day)

• Own integrations across a wide range of data sources (EDR, IAM, Cloud, SaaS)

• Own the transformation layer that turns disparate data into a normalized, enriched, and queryable model

• Build an engine that correlates entities across disparate data sources

• Develop and operate both real-time and batch processing systems

• Work on core search capabilities across vast amounts of data

• Collaborate with our internal detection engineers, threat hunters, and product engineers to ensure the Nebulock platform has the data it needs and that the data is structured correctly

• Help drive the architecture and technical direction of Neublock’s platform

• 4+ years of experience building backend distributed systems and working with data

• Proficiency in Python, Java, Go, Rust, or similar

• Experience with either AWS or GCP

• Strong experience with data pipelines

• Experience with event-driven systems

• Strong understanding of system design, data modeling, and performance trade-offs

• Experience with OLAP databases

• Ability to adapt, iterate, and ship quickly

• Hunger for growth and the desire to work in a low-ego environment

• Experience with streaming data processing engines (i.e. Flink)

• Experience building or working with search systems over large datasets

• Cybersecurity experience

• Startup experience

• A dynamic startup environment with opportunities for rapid career growth

• A collaborative culture that values innovation and creativity

• Competitive salary and equity options

• Comprehensive benefits package (including 401K)

• Opportunities to travel for conferences, workshops, and team-building events