Staff Software Engineer, Alerting Platform

About the role

The Staff Software Engineer on Command|Alert will span multiple teams responsible for rule evaluation, anomaly detection, and alert delivery. They will set the architecture for the correlation and alerting engine, ensure end‑to‑end reliability, drive data‑driven topology generation, integrate LLMs, mentor engineers and represent the product’s technical direction to stakeholders.

About the company

CommandLink is a high‑growth company focused on business communication, building the Command|Alert signal‑processing core that transforms raw security, monitoring and telemetry data into trustworthy alerts. The culture emphasizes innovation, bold ideas, strategic thinking and a fair, consistent hiring process.

Requirements

• Designed, built, or operated high‑reliability alerting or notification systems in production, including rule‑based and ML‑based detection at scale.
• Strong experience with Kafka producing and consuming event streams for downstream delivery.
• Proficient with telemetry and protocol data (security tooling output, monitoring telemetry, syslog, OpenTelemetry, NetFlow/sFlow, SNMP, ICMP, firewall logs) and ability to derive network/system topologies and dependency maps.
• Experience building or operating systems where webhook reliability, idempotency, and delivery guarantees under load are essential.
• Mastery of Go and/or Python, with experience in container orchestration and multi‑cloud environments.
• Demonstrated ability to make organization‑level architecture and technology decisions.
• Experience with Temporal or comparable workflow orchestration platforms (nice to have).
• Experience using LLMs to reason over structured system or network data for troubleshooting, remediation, or investigation (nice to have).
• Familiarity with stream processing frameworks like Flink, Protocol Buffers, or Argo and Spacelift for CI/CD and IaC (nice to have).
• Familiarity with Memgraph or other graph stores for topology data (nice to have).
• Background with osquery, Steampipe, or similar endpoint and cloud inventory tooling (nice to have).
• Experience operating in multi‑tenant, cloud‑native environments with secrets management and TLS at scale (nice to have).