The software runs sanctioned social engineering exercises that use calls, SMS and deepfake media.
Next, the company is adding testing for what happens after a user clicks: whether an attacker could reach accounts, sessions or downstream permissions, and proof of whether defenses spotted or stopped it.
The company runs its own fine-tuned model, voice synthesis and self-hosted phone infrastructure. Most engineering is done in TypeScript, Rust and AWS.
The team is small, and you would help shape how the platform is built and run.
The founder previously led a red team at BlackRock and worked in offensive cyber operations at MITRE.
Responsibilities
Build and run the services that launch campaigns, coordinate calls and messages, track execution and gather results.
Write backend services and campaign execution code in TypeScript and Rust.
Own scheduling, cancelling, retrying and recovering long-running workflows.
Build parts of the phone and text messaging stack, including routing, delivery tracking, call recording and connections to outside providers.
Cut delays in model replies, speech synthesis and call delivery.
Build services and integrations that check scoped access to accounts, sessions and downstream resources.
Process events that arrive duplicated, late or out of sequence.
Operate AWS deployments, monitoring, authorization and tenant isolation.
Requirements
Strong TypeScript or Rust skills, and the ability to work in both.
A track record building and running production backend services.
Solid knowledge of API design, concurrency, data modeling and distributed systems.
Hands-on AWS experience and the ability to trace problems across services.
Solid grasp of concurrency, networking, state management and failure handling.
Able to work through timeouts and partial failures, recover cleanly and keep execution state accurate.
Able to document service behavior, justify design choices and state assumptions clearly.
Able to give clear incident updates, leave useful handoffs and write up what failed, what changed and how the fix was checked.
3+ years of experience.
Listed skills: Amazon Web Services (AWS), Microsoft Azure, software architecture, information security and software security.
Useful: experience with telephony, streaming audio, model serving, enterprise identity systems or offensive security.