Job Description

About Astelia

Astelia helps security teams dramatically reduce the volume of incidents generated by vulnerability management tools. We do this by building a deep, contextual understanding of our customers’ networks - turning noise into signal and enabling security teams to focus on what truly matters. We’re a small, fast-moving startup with great people who care about impact, craftsmanship, and each other.

About the Role

You’ll be part of a small, elite founding engineering team solving real-world security problems that sit at the intersection of network security, cloud infrastructure, and large-scale data systems

This is a hands-on role where you’ll design and build core parts of the product - from network-aware security logic and attack-path modeling, to high-performance pipelines that process massive volumes of security and infrastructure data.

If you’re excited about deep security challenges, love building real systems end-to-end, and want massive impact in an early-stage team - we’d love to meet you.

Requirements

Qualifications

• Experience: 5+ years of hands-on experience in cybersecurity engineering or security-focused backend engineering.
• Strong Networking Knowledge: Deep understanding of:
• Firewalls, routing, NAT, ACLs, subnets
• Common enterprise network architectures
• Network segmentation and exposure concepts
• Security Engineering: Strong foundations in:
• Threat modeling
• Attack paths / exposure chains
• Security best practices for modern on prem and cloud systems
• Backend / Systems Engineering: Ability to build production-grade systems with clean architecture and strong engineering standards.
• Production Ownership: Comfortable owning systems in production - observability, debugging, performance, and reliability.
• Team Mindset: Strong communication skills, high ownership, and the ability to thrive in a fast-paced, “build-first” startup environment.

Advantage

• Experience with Vulnerability Management, CVEs, scanners, asset inventory, risk scoring, and remediation workflows.
• Experience with Exposure Management concepts (attack surface, reachable assets, blast radius, privilege paths).
• Experience with cloud security
• Experience with high-scale data ingestion and normalization pipelines.
• Familiarity with graph-based security modeling (attack graphs, exposure graphs, reachability analysis).
• Experience with high-performance data systems (ClickHouse / Postgres / graph databases).
• Strong debugging skills and ability to optimize complex distributed systems.
• Cloud & Kubernetes Experience working with cloud-native systems and Kubernetes environments.