Senior Software Engineer: Ransomware Collections

Description

The company has 1,000+ intelligence professionals serving over 1,900 clients worldwide, with employees from over 40 nationalities.

The company is a leader in intelligence; more than 50% of Fortune 100 companies are customers, and its product holds a 4.6-star user rating on G2.

The team is hiring a senior engineer to build the next version of its ransomware collection work.

The role improves the depth, reliability and differentiation of current ransomware collections, and widens them past threat-actor sites into the wider network of infrastructure, identities, communities and relationships linked to ransomware activity.

You combine collection engineering skill with an understanding of how technical choices shape the confidence of intelligence that reaches analysts and customers. You will work with the ransomware analysts and the wider collections group so the automated access approach keeps pace as the ransomware ecosystem changes.

A main goal is collection that delivers intelligence not available through open-source ransomware monitoring.

Responsibilities

• Take ownership of the engineering behind ransomware collection, focusing on reliability, coverage, timeliness and intelligence value.
• Extend collection past leak sites and other standard sources toward user-centred methods that reveal more about relevant actors and communities.
• Work with ransomware analysts to turn intelligence needs and new investigative questions into collection systems that scale.
• Design and keep refining automated access methods for ransomware sources, especially where logins, anti-automation defences, infrastructure moves or other barriers make collection hard.
• Build infrastructure to find, access, monitor and retain hard-to-collect ransomware material at scale.
• Make existing ransomware collection systems more resilient and easier to maintain, cutting manual work and operating overhead.
• Create engineering patterns so new sources and collection methods can move from testing to production quickly and reliably.
• Coordinate with engineering, collections and analysis teams so collected data is structured and delivered to maximise its downstream value.
• Provide technical leadership and mentoring across the collections group, and help set engineering standards and long-term architecture.

Requirements

• You do not need experience with every tool below, but you should be ready to learn and work across this stack.
• Cloud and infrastructure: AWS, Docker, Kubernetes, Terraform.
• Languages: Python, Go, JavaScript/TypeScript.
• Data and storage: S3, PostgreSQL, Redis, and distributed caching or storage systems.
• Collection and automation: HTTP-based collectors, browser automation, headless browsers, Playwright or Selenium-style tools, and managing authenticated sessions.
• Network and access: TOR, proxies, SOCKS, VPNs, distributed egress and specialised collection infrastructure.
• Messaging and processing: queue- and event-driven architectures.
• Engineering practice: GitHub, CI/CD pipelines, automated testing, observability and production monitoring.
• Security and intelligence: dark-web and restricted-source collection, ransomware infrastructure, identity and entity resolution, and hostile web environments.
• Experience building dependable systems against unstable or deliberately hard-to-automate sources is particularly valuable.

Conditions

This is a full-time position.

The base salary range is $129,000 to $193,500.

Pay within that range depends on state, work location, job-related skills, experience, and education or training.

Ranges are set by role, level and location, and the range shown applies to new hires across all US locations.

Final-round interviews are in person or by a live, scheduled video call with the hiring manager; the company does not interview by instant message or text, and all HR contact comes from company email.

Agencies need a valid written agreement with the recruitment team and written authorization before submitting resumes, or submissions will not be accepted and no fees will be paid.

The company is an equal opportunity and affirmative action employer that does not discriminate on protected characteristics, does not penalise pay discussions, runs no lie detector tests as a condition of employment, and maintains a drug-free workplace.

Benefits

• May be eligible for incentive compensation and equity.
• May be eligible for medical, dental, vision and life insurance, plus a 401K.
• A recruiter can explain the full compensation and benefits package during the hiring process.