Foresite

Lead technical onboarding and develop detection rules and playbooks for cloud security automation. | Requires 2+ years experience with Google SecOps, parser creation, YARA-L, Python, and configuring GCP SCC and Wiz. | Foresite is looking for a highly technical, results-oriented Cloud Security Engineer to serve as the technical lead for onboarding customers to GCP Security Command Center (SCC) and Wiz. In this role, you will be the driving force behind ensuring cloud security findings are seamlessly integrated into Google SecOps, providing our clients with a unified and actionable security posture. What You'll Do: In this role, you will operate at the heart of Foresite’s technical onboarding framework. You will lead the hands-on configuration of cloud security tools, partnering closely with customer analysts to translate complex findings into automated, high-fidelity security operations. You will be measured on your ability to drive successful technical handoffs and your proficiency in building custom detection and remediation logic. Technical Onboarding & Implementation Lead the Integration: Lead the hands-on configuration of GCP SCC and Wiz for new customers, ensuring all high-fidelity security findings are correctly ingested into Google SecOps. Data Integrity: Ensure technical accuracy in parser creation and UDM mapping to maintain the highest quality of security data. Detection & Automation Custom Logic: Write custom YARA-L detection rules to correlate cloud posture findings with network traffic. Streamline Response: Develop end-to-end SOAR Playbooks and utilize Python to write logic for custom actions, streamlining the customer's remediation workflows. Customer Enablement & Support Technical Walkthroughs: Lead sessions for customer analysts, teaching them how to navigate SCC/Wiz findings and investigate alerts within the Google SecOps interface. Troubleshooting: Act as the technical point of contact for resolving integration errors and optimizing automation scripts. Who You Are: SecOps Expert: You have at least 2 years of strong hands-on experience with Google SecOps (Chronicle), specifically in parser creation, UDM mapping, and YARA-L rule writing. Cloud Specialist: You possess proven experience configuring GCP SCC and Wiz, with foundational knowledge equivalent to a Google Cloud Associate Cloud Engineer. Automation Minded: You are proficient in Python and enjoy using it to solve complex security automation challenges. Independent Driver: You have a demonstrated ability to manage a customer onboarding from technical kickoff to final handoff without constant senior oversight. Strategic Communicator: You can translate deep technical configurations into actionable insights for customer security teams. Nice to Have: Certified Professional: Current Google Cloud Associate Cloud Engineer or professional security certifications. Advanced Scripting: Experience building complex API integrations between cloud security platforms. Architectural Vision: Experience advising customers on cloud security best practices and long-term posture management. Why Join the Foresite Team? At Foresite, we aren’t just another security provider—we are a mission-driven partner helping organizations navigate an increasingly complex threat landscape. Founded by passionate security practitioners, we’ve grown into a global leader in SecOps and MDR by staying true to our core value: radical transparency. When you join Foresite, you are part of a "humans-first" culture where your expertise is valued, and your well-being is a priority. We leverage our Google Cloud Premier SecOps Partnership to stay at the cutting edge, but we know that our greatest asset is our people. What We Offer: Comprehensive Health & Wellness: Robust medical insurance options to keep you and your family healthy. Employer-Covered Insurance: We fully provide employer-paid Dental coverage, as well as Short-Term (STD) and Long-Term Disability (LTD). Generous Time Off: We believe in a true work-life balance. You’ll start with 3 weeks of paid vacation, plus additional sick leave and paid company holidays. Growth & Mentorship: Access to world-class training. We support your career trajectory, whether you’re looking to deepen your technical skills or move into leadership. Impactful Work: Help protect global clients using the latest AI-enhanced security tools and GCP native technologies.

Design and implement AI-powered workflows and RAG pipelines integrating LLMs into security operations with end-to-end AI architecture ownership. | Requires 5+ years software engineering with React, TypeScript, production-level LLM integration, PostgreSQL, Firestore, and secure multi-tenant cloud architecture experience. | Foresite is looking for a Senior Software Engineer - AI Intergration with strong, hands-on AI experience to help shape how AI gets built into our platform. We are a Managed Security Services Provider (MSSP) building the next generation of AI-powered security operations. We're integrating agentic AI into the workflows our analysts and customers rely on every day — a force multiplier for detecting, investigating, and responding to threats faster. What You'll Do In this role, you'll design and ship the systems that connect LLMs to real security workflows — from RAG pipelines over threat intelligence to agentic automation that handles triage and investigation steps that currently require human effort. You'll influence our AI architecture, product direction, and the standard for how the team builds with LLMs going forward. Design and build AI-powered workflows that serve both internal analysts and external customers across guided security operations Own the AI architecture end-to-end: model selection, prompt engineering, RAG pipelines, agent orchestration, and evaluation frameworks Optimize for cost and performance — manage token budgets, reduce latency, and build instrumentation so we know exactly what our AI spend buys us Collaborate with product and engineering to identify where AI creates real leverage and where it doesn't Mentor engineers on LLM best practices and raise the AI literacy of the broader team Who You Are Engineering Principles: 5+ years of software engineering experience with strong fundamentals (you write production code, not just notebooks). AI/LLM Integration: Deep, practical experience using Agent Development Kit. You should have a proven track record of integrating LLMs into production environments - prompt engineering, context management, RAG architectures, agent frameworks, evaluation and observability. The Modern Stack: You are deeply proficient in React 18/19 and TypeScript. You are comfortable with React Router v7 and modern routing patterns. Data & Backend: You are comfortable designing schemas, writing queries, and reasoning about performance across PostgreSQL and Firestore. You feel at home with modern ORMs and use runtime validation to enforce data integrity at system boundaries. Security: Experience designing secure multi-tenant AI architectures — you understand how to build LLM integrations that enforce strict data isolation between customers. System Design: Strong understanding of scalable and highly available cloud-native system design. Product Focused: Experience working closely with product teams to ship user-facing features. Nice to Have Platform Orchestration: Knowledge of Infrastructure as Code (IaC) using Terraform to automate, orchestrate, and manage cloud platform resources effectively. Google Cloud Security: Familiarity or hands-on experience with Google Cloud Security products (e.g., Security Command Center, SecOps, , Mandiant). Advanced AI Workflows: Experience building autonomous AI agents, multi-modal applications, or complex prompt orchestration pipelines. Why Join Foresite? We are a mission-driven partner helping organizations navigate an increasingly complex threat landscape. Founded by security practitioners, we’ve grown into a global leader in SecOps and MDR by staying true to our core value: radical transparency. When you join Foresite, you are part of a "humans-first" culture where your expertise is valued, and your well-being is a priority. We leverage our Google Cloud Premier SecOps Partnership to stay at the cutting edge, but we know that our greatest asset is our people.

Lead front-end ecosystem evolution and full stack development for a multi-tenant cybersecurity SaaS platform. | 5+ years full-stack experience with React, TypeScript, secure web development, and database management in multi-tenant environments. | Foresite is seeking a product-minded Senior Fullstack Engineer with a mastery of modern front-end architectures to help build and scale our multi-tenant SaaS platform. As a foundational member of our engineering team, you won’t just write code—you will architect the "humans-first" interfaces that make complex cybersecurity data intuitive and actionable. What You'll Do In this role, you’ll be working on our multi-tenant SaaS platform built with modern web technologies. Your primary focus will be leading the evolution of our front-end ecosystem while maintaining a strong, lateral grip on our backend services. You will ensure our platform remains performant, accessible, and maintainable as we scale. Architect and build front-end features for our multi-tenant SaaS platform using React.js and TypeScript Work across the full stack, owning backend integrations and data access patterns end-to-end Build and maintain a shared component library that scales consistently across our client base Partner closely with product, design, and backend engineers to ship polished, production-ready features Integrate with PostgreSQL and NoSQL data stores through clean, well-structured backend service layers Design, consume, and extend RESTful APIs that power our platform’s core workflows Champion code quality through thorough reviews and consistent enforcement of engineering standards Own your deployments—debugging, performance tuning, and keeping production healthy Drive architectural decisions and contribute to engineering roadmap planning Mentor junior and mid-level engineers through pairing, feedback, and code review Identify and address performance bottlenecks across the front-end and API layers Apply security-conscious development practices, particularly around auth, RBAC, and data isolation in a multi-tenant context Engage actively in Agile ceremonies including sprint planning, standups, reviews, and retrospectives Document what you build and contribute to a culture of knowledge sharing across the team Who You Are Experience: 5+ years of professional experience in Full Stack development, with a clear specialization in front-end architecture for complex B2B SaaS or Cybersecurity platforms. The Modern Stack: You are deeply proficient in React 18/19 and TypeScript. You are comfortable with React Router v7 and modern routing patterns. Web Security: You build secure web applications by default. You understand and mitigate common vulnerabilities such as XSS, CSRF, and injection attacks, and know how they apply in modern React and TypeScript apps. Data & Backend: You are comfortable designing schemas, writing queries, and reasoning about performance across PostgreSQL and Firestore. You feel at home with modern ORMs and use runtime validation to enforce data integrity at system boundaries. Architectural Foresight: You have experience with multi-tenant architectures and implementing robust RBAC/ABAC models to enforce strict data isolation. Reliability as a Habit: ou write tests as part of the job, not as an afterthought. You are proficient with Vitest and Testing Library for unit and integration coverage, and Playwright for critical E2E flows. Tooling & Workflow: ou care about developer experience. You are comfortable with CI/CD pipelines, Git, and modern workflows like Stacked PRs. You embrace AI-assisted development tools to ship faster without sacrificing quality. Integration Expert: You are comfortable on both sides of a system boundary — consuming third-party APIs on the frontend and writing the backend glue that connects them. You understand API contracts, webhook reliability, and data consistency across services. Nice to Have You have a background in Cybersecurity, understanding the unique UI/UX and security challenges of the industry. You have a "Security First" approach to coding, always thinking about the OWASP Top 10. Why Join Foresite? We are a mission-driven partner helping organizations navigate an increasingly complex threat landscape. Founded by security practitioners, we’ve grown into a global leader in SecOps and MDR by staying true to our core value: radical transparency. When you join Foresite, you are part of a "humans-first" culture where your expertise is valued, and your well-being is a priority. We leverage our Google Cloud Premier SecOps Partnership to stay at the cutting edge, but we know that our greatest asset is our people.