Principal Software Engineer - XTM Integration
🌀 The Company
Filigran, founded in October 2022, stands out in the cybertech ecosystem for its commitment to revolutionizing cyber threat management with a proactive approach. Its mission is to develop innovative open-source solutions designed to anticipate cyber threats, identify security gaps, and strengthen organizational security posture.
Filigran solutions are now trusted by over 6,000 public and private organizations worldwide.
💼 Your Responsibilities
Technical Vision & Standards for XTM Integration
Define and own the technical principles of the XTM Integration team: architecture patterns, code quality standards, tooling choices, CI/CD practices, AI-assisted development workflows, and benchmarking approaches.
Ensure these principles are understood, embraced, and consistently applied across the team — through documentation, code review, pairing, and example.
Drive the evolution of the connector/integration framework shared across OpenCTI, OpenAEV, and OpenGRC — making it easier, faster, and more reliable to build high-quality integrations.
Make key technical decisions on integration architecture: data flow design, error handling, retry strategies, observability, performance, and security.
Stay ahead of the ecosystem — evaluate new tools, libraries, and patterns before the team needs them.
Open Source Community & Ecosystem
Be a technical steward of Filigran's open-source integration ecosystem — ensuring that the connector framework and all published integrations are exemplary references that external contributors can learn from and build upon.
Define and enforce contribution guidelines, code standards, and documentation practices that make it easy for community members to develop their own connectors.
Engage with the open-source community: review external contributions, provide technical guidance, and represent Filigran's engineering culture publicly.
Design integration APIs and SDKs with the external developer experience in mind — clarity, simplicity, and extensibility are first-class concerns.
XTM Foundation Contribution
Participate actively in the XTM Foundation as a full member — contributing to cross-product engineering principles, shared tooling decisions, and technical standards that apply across OpenCTI, OpenAEV, and OpenGRC.
Bring the integration team's perspective into Foundation discussions, and carry Foundation decisions back into the integration team.
Collaborate with other Principal and Staff Engineers to maintain coherence across the full XTM engineering organization.
Hands-On Engineering
Write production code — you lead by example, not from a distance.
Prototype and validate new approaches before rolling them out to the team.
Review critical PRs with depth and care; your feedback should teach, not just correct.
Contribute to performance benchmarking and observability tooling for the integration layer.
🤝 Who You'll Work With
Reports to: VP of Technology.
Key collaborators: XTM Integration engineering team; XTM Foundation (Principal/Staff Engineers across OpenCTI, OpenAEV, OpenGRC); Product Managers; open-source community contributors.
Working model: Primarily embedded in the XTM Integration team, with regular participation in XTM Foundation cross-team work.
🧬 Profile We're Looking For
8+ years of experience in software engineering, with a track record of technical leadership on complex, production-grade systems.
Deep Python expertise — Python is the core language of the XTM Integration ecosystem. You know the language deeply: its idioms, its ecosystem, its packaging (Poetry, pip, uv), its async patterns, its performance characteristics.
Solid understanding of integration and data pipeline patterns: event-driven architectures, ETL/ELT, API design (REST, GraphQL, webhooks), authentication flows, rate limiting, and error recovery.
Proven ability to define and carry technical standards — you've been the person who raises the bar on a team, not just follows it.
Strong open-source mindset: you understand what it means to build software for an external community, not just internal users. You care about documentation, API ergonomics, and contributor experience.
Excellent written communication — you can write a design doc, a contribution guide, or a code review comment that others actually learn from.
Comfortable working in a remote-first, async culture; clear communicator in English.
Autonomy and ownership: you drive problems to resolution, you don't wait for permission, and you enable others rather than becoming a bottleneck.
Bonus: Experience with cybersecurity tooling (SIEM, EDR, SOAR, threat intelligence platforms); knowledge of STIX/TAXII or other CTI standards; prior open-source maintainership.
🏗️ About XTM Integration
The XTM Integration team is responsible for building and maintaining the full ecosystem of connectors and integrations that connect the XTM Suite to the outside world:
OpenCTI connectors — import, export, enrichment, and stream connectors that bring external threat data in and push intelligence out to security tools (SIEM, EDR, SOAR, ticketing, and more).
OpenAEV collectors and injectors — integrations that feed adversarial exposure scenarios with real-world data and drive automated attack simulation across target systems.
OpenGRC connectors — integrations that connect governance, risk, and compliance workflows to external data sources and security tools.
🏗️ About XTM Foundation
XTM Foundation is Filigran's cross-product engineering team, created to raise the technical bar across the entire XTM Suite. The team owns the problems that no single product team can solve alone: shared architecture, inter-product communication standards, common UI components, CI/CD infrastructure, test quality, developer experience, and AI-assisted development practices.
XTM Foundation engineers work closely with all product teams — not as gatekeepers, but as force multipliers. They bring deep expertise, evaluate new approaches before rolling them out at scale, and help 60+ engineers build better software, faster.
🌱 Why Join Filigran? More than just a job.
We’re a fast-growing, global, and fully remote company building open-source cybersecurity solutions, increasingly powered by AI, to help defense teams anticipate threats and act faster.
⭐ What we believe
We believe we do work that matters, uniting defenders into a global community to make security more open, resilient & collaborative.
💻 How we work
We do work that matters by combining strong engineering standards with emerging technologies, including AI, to move faster and smarter.
🧭 What guides us
We make our work matter by building a culture grounded in our CORE values of Cohesion, Openness, Responsibility, and Equity. The principles that guide how we make decisions, treat people, and grow together, especially when no one’s watching.
💰 Compensation & Benefits
Competitive pay + equity - everyone shares in our success
Remote-first, flexible, and balanced - work that fits your life
Your setup, your choice - pick the gear that works for you
Twice-a-year gatherings - we meet in person for regional and global offsites to connect, collaborate, and strengthen our culture beyond the screen
🌍 Equal Employment Opportunity
We enable cybersecurity through inclusion - from code to culture.
At Filigran, we are proud to be an equal opportunity employer. We believe diversity of our people make our products and our team stronger. We welcome talent of every background, identity, and lived experience, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, or veteran status.
What matters here is what you bring, not what you look like, where you’re from, or how you identify.
🚀 Ready to Join Us?
Apply now and help us build the future of the cybersecurity ecosystem, together.