Description
About Astelia
Astelia helps security teams dramatically reduce the volume of incidents generated by vulnerability management tools. We do this by building a deep, contextual understanding of our customers’ networks - turning noise into signal and enabling security teams to focus on what truly matters. We’re a small, fast-moving startup with great people who care about impact, craftsmanship, and each other.
About the Role
You’ll be part of a small, elite founding engineering team solving real-world security problems that sit at the intersection of network security, cloud infrastructure, and large-scale data systems.
This is a hands-on role where you’ll design and build core parts of the product - from network-aware security logic and attack-path modeling, to high-performance pipelines that process massive volumes of security and infrastructure data.
If you’re excited about deep security challenges, love building real systems end-to-end, and want massive impact in an early-stage team - we’d love to meet you.
Requirements
Qualifications
- Experience: 5+ years of hands-on experience in cybersecurity engineering or security-focused backend engineering.
- Strong Networking Knowledge: Deep understanding of:
- Firewalls, routing, NAT, ACLs, subnets
- Common enterprise network architectures
- Network segmentation and exposure concepts
- Security Engineering: Strong foundations in:
- Threat modeling
- Attack paths / exposure chains
- Security best practices for modern on prem and cloud systems
- Backend / Systems Engineering: Ability to build production-grade systems with clean architecture and strong engineering standards.
- Production Ownership: Comfortable owning systems in production - observability, debugging, performance, and reliability.
- Team Mindset: Strong communication skills, high ownership, and the ability to thrive in a fast-paced, “build-first” startup environment.
Advantage
- Experience with Vulnerability Management, CVEs, scanners, asset inventory, risk scoring, and remediation workflows.
- Experience with Exposure Management concepts (attack surface, reachable assets, blast radius, privilege paths).
- Experience with cloud security.
- Experience with high-scale data ingestion and normalization pipelines.
- Familiarity with graph-based security modeling (attack graphs, exposure graphs, reachability analysis).
- Experience with high-performance data systems (ClickHouse / Postgres / graph databases).
- Strong debugging skills and ability to optimize complex distributed systems.
- Cloud & Kubernetes: Experience working with cloud-native systems and Kubernetes environments.