Forward Deployed Engineer

We're looking for a Forward Deployed Engineer to sit at the intersection of our product, our engineering team, and our most strategic customers. You'll embed directly with customers - often security operations centers, SOCs, and enterprise security teams - to deploy, configure, and extend our AI-powered cybersecurity platform against their real environments and real threats.

FDEs write production code, build custom integrations and detections, and turn ambiguous customer problems into shipped solutions - often in days, not quarters. You'll be the technical bridge between what customers actually need and what our product does, and you'll feed those learnings back into our roadmap.

What You'll Do

• Embed on-site or virtually with customers to understand their environment, data sources, and threat models
• Build custom integrations, data pipelines, detection logic, and workflows on top of our core platform to solve customer-specific problems
• Own technical deployments end-to-end: architecture, implementation, validation, and handoff
• Debug and resolve complex issues across the stack - from data ingestion to model behavior to UI - often under time pressure during live incidents
• Translate messy, ambiguous customer requirements into scoped technical solutions
• Act as the voice of the customer internally, feeding structured feedback to Product and Engineering to influence the roadmap
• Write internal tooling, scripts, and reusable modules that make future deployments faster
• Travel to customer sites as needed (expect variable travel, potentially 25–50% depending on account load)

• 3+ years of experience as a software engineer, security engineer, or similar hands-on technical role
• Strong coding ability in at least one of: Python, Go, or similar - able to build real, production-quality software quickly
• Comfort operating with ambiguity - you can walk into an unfamiliar environment and figure out what "done" looks like
• Background or strong working knowledge of security concepts: SIEM/SOAR, EDR, network telemetry, log analysis, threat detection, or incident response
• Experience with cloud infrastructure (AWS/GCP/Azure) and containerized environments (Docker/Kubernetes)
• Excellent communication skills - you can explain technical tradeoffs to both engineers and security analysts/executives
• A bias toward action: you'd rather ship a working solution today than a perfect one next quarter
• Willingness to travel and work directly with customers, sometimes during active incidents