Recorded Future

Design and deploy autonomous AI agentic systems and mentor junior engineers. | Expert Python and distributed systems experience with knowledge of LLMs and cloud infrastructure. | With 1,000+ intelligence professionals serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company! Recorded Future provides intelligence that 1,500+ clients use to defend their people and networks from cybersecurity threats. Our intelligence data provides analytics for many security and risk management needs. This data is derived from technical data, threat actor monitoring, social media, open sources, and other data sources. In this role, your mission is to design, build, and deploy the next generation of AI Agentic systems that process and enrich this intelligence data autonomously. In this Senior Software Engineer role, you will be a key individual contributor, driving the development of resilient, scalable software systems focused on leveraging Large Language Models (LLMs) and autonomous agents for data processing, analysis, and threat detection. You will be responsible for building sophisticated, production-grade applications that enrich our threat intelligence, and you will mentor junior engineers, fostering technical excellence and best practices.   WHAT YOU’LL DO: * Design, develop, and deploy highly reliable and scalable software systems, specializing in AI Agentic tooling and ML applications. * Serve as a technical leader in the implementation of frameworks and best practices for creating, evaluating, and safely deploying autonomous AI agents in a production environment. * Collaborate with engineering managers and cross-functional teams to integrate AI Agent solutions across the platform. * Drive engineering excellence by conducting rigorous code reviews, focusing on code quality, performance optimization, and operational maturity. * Lead the technical design and architectural discussions for new features and components within the AI Tooling roadmap. * Manage project tasks through an agile SDLC, ensuring timely delivery and high-quality results. WHAT YOU’LL BRING: * Strong technical background in software engineering, with deep expertise in building and scaling distributed systems. * Expert-level proficiency in Python and related ecosystem for production AI/ML applications. * Proven track record as a senior individual contributor, designing and delivering complex software solutions. * Technical skills with modern cloud platforms (e.g., AWS, GCP, Azure) and engineering workflow tools (e.g., Jira, Git). * Deep understanding of the AI Agent paradigm, including hands-on experience with LLMs, prompt engineering, agentic loop design, and retrieval-augmented generation (RAG). * Experience driving coordinated action between cross-functional teams (product, research, stakeholders) working from different locations around the world. * A pragmatic mindset and a strong focus on delivering measurable, high-impact results. * A keen curiosity for cybersecurity and finding innovative ways to apply AI Agent technology to keep our clients safe.     The base salary range for this full-time position is $129,000- $193,500. Our salary ranges are determined by role, level, and location. The salary displayed reflects the range for new hire salaries for the position across all US locations. Within the range, individual pay is determined by state, work location and additional factors, including job-related skills, experience, and relevant education or training. This position may be eligible for incentive compensation, equity, and medical, dental, vision, life insurance and 401K. Your recruiter can share more about the specific details of the compensation and benefit package during the hiring process. Why should you join Recorded Future? Recorded Future employees (or “Futurists”), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.6-star user rating on G2 and more than 50% of Fortune 100 companies as customers. Want more info?  Blog & Podcast [https://www.recordedfuture.com/blog/]: Learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence Linkedin [https://www.linkedin.com/company/recorded-future/], Instagram [https://www.instagram.com/recordedfuture/] & Twitter [https://twitter.com/RecordedFuture]: What’s happening at Recorded Future The Record [https://therecord.media/]: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field Timeline [https://www.recordedfuture.com/our-story]: History of Recorded Future Recognition [https://www.recordedfuture.com/why-recorded-future#industry--culture-awards]: Check out our awards and announcements [https://www.youtube.com/watch?v=2WhmRNPWIRk] We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles.  By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day. If you need any accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to our recruiting team at careers@recordedfuture.com [careers@recordedfuture.com]  Recorded Future is an equal opportunity and affirmative action employer and we encourage candidates from all backgrounds to apply. Recorded Future does not discriminate based on race, religion, color, national origin, gender including pregnancy, sexual orientation, gender identity, age, marital status, veteran status, disability or any other characteristic protected by law. Recorded Future will not discharge, discipline or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant. Recorded Future does not administer a lie detector test as a condition of employment or continued employment. This is in compliance with the law of the Commonwealth of Massachusetts, and in alignment with our hiring practices across all jurisdictions. Recorded Future maintains a drug-free workplace. Note: Our interview process for all final-round candidates requires a mandatory in-person interview or a live, scheduled video conference with the hiring manager. We do not conduct interviews via instant messaging or text. All communications during the application process will come from individuals within our HR department via their Recorded Future email address. -------------------------------------------------------------------------------- Notice to Agency and Search Firm Representatives: Recorded Future will not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to Recorded Future, including those sent to our employees or through our website, will become the property of Recorded Future. Recorded Future will not be liable for any fees related to unsolicited resumes. Agencies must have a valid written agreement in place with Recorded Future's recruitment team and must receive written authorization before submitting resumes. Submissions made without such agreements and authorization will not be accepted and no fees will be paid.

Design, build, and scale backend services and data pipelines for Attack Surface Intelligence, ensuring system reliability, performance, and operational excellence while collaborating cross-functionally and mentoring engineers. | Proven experience with scalable Python APIs and microservices, distributed systems knowledge, Kafka, Clickhouse, Elasticsearch expertise, strong communication, independent project leadership, and ability to drive coding standards. | With 1,000 intelligence professionals, over $300M in sales, and serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company! Principal Data EngineerAbout the Role We’re looking for a seasoned engineer to help design, build, and scale the systems that power our Attack Surface Intelligence module. You’ll be taking ownership of critical data pipelines responsible for the ingestion and distribution of critical intelligence signals, both internally and directly to customers via the product. The Attack Surface Intelligence Data Engineering team is responsible for two key datasets: our holistic global internet inventory and the technical artifacts of our customers’ attack surface. This role reports directly to the Engineering Owner for Attack Surface Intelligence Data and is ideal for someone who enjoys writing clean, maintainable code and thrives in distributed systems environments. You'll work closely with product management and other engineering teams to drive technical strategy and ensure our systems are reliable, performant, and insightful. What You’ll Do: • Lead the design and implementation of backend services and APIs in Python • Architect and evolve microservice-based systems for scalability and resilience • Collaborate with product managers and cross-functional partners to align technical work with business goals • Proactively identify and resolve data and integration issues by diving deep into our pipelines and systems • Drive observability and operational excellence across services • Mentor other engineers through code reviews and design discussions • Coordinate with internal stakeholders outside of the Attack Surface Intelligence team to inform solutions for data transfers around the greater Recorded Future ecosystem • Contribute to technical roadmaps and long-term platform strategy What You'll Bring: • Proven experience designing & maintaining scalable APIs and microservices in Python leveraging tools like Kafka, Clickhouse, and Elasticsearch. • Deep understanding of distributed systems and service-oriented architecture • Comfortable exploring data to debug, validate assumptions, and drive better system behavior • Excellent communication skills and the ability to work across teams to align on goals and priorities • Track record of operating independently and driving complex projects, especially with a geographically distributed team • Experience with informing and driving coding and design standards within a team #LI-Remote Why should you join Recorded Future? Recorded Future employees (or “Futurists”), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.8-star user rating from Gartner and more than 45 of the Fortune 100 companies as clients. Want more info? Blog & Podcast: Learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence Linkedin, Instagram & Twitter: What’s happening at Recorded Future The Record: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field Timeline: History of Recorded Future Recognition: Check out our awards and announcements We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles. By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day. If you need any accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to our recruiting team at careers@recordedfuture.com Recorded Future is an equal opportunity and affirmative action employer and we encourage candidates from all backgrounds to apply. Recorded Future does not discriminate based on race, religion, color, national origin, gender including pregnancy, sexual orientation, gender identity, age, marital status, veteran status, disability or any other characteristic protected by law. Recorded Future will not discharge, discipline or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant. Recorded Future does not administer a lie detector test as a condition of employment or continued employment. This is in compliance with the law of the Commonwealth of Massachusetts, and in alignment with our hiring practices across all jurisdictions. Notice to Agency and Search Firm Representatives: Recorded Future will not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to Recorded Future, including those sent to our employees or through our website, will become the property of Recorded Future. Recorded Future will not be liable for any fees related to unsolicited resumes. Agencies must have a valid written agreement in place with Recorded Future's recruitment team and must receive written authorization before submitting resumes. Submissions made without such agreements and authorization will not be accepted and no fees will be paid. Note: Our interview process for all final-round candidates requires a mandatory in-person interview or a live, scheduled video conference with the hiring manager. We do not conduct interviews via instant messaging or text. All communications during the application process will come from individuals within our HR department via their Recorded Future email address.

Lead and mentor a team of engineers focused on Dark Web data collection and analysis while managing projects and collaborating with cross-functional teams. | Significant leadership experience in data engineering, managing remote/hybrid teams, Python and database knowledge, strong organizational and communication skills. | Description: • Deliver customer value by producing data and analytics that summarize information from the Dark Web and drive the alerting that our customers directly consume. • Lead, mentor, and develop a diverse team of six engineers focused on Dark Web data collection and analysis, fostering a culture of collaboration and continuous improvement. • Coordinate and oversee the development and maintenance of web harvesting and data processing applications and pipelines, ensuring they meet organizational and client needs. • Partner with the Product Manager, Dark Web to manage project timelines and deliverables in an often high-pressure context, maintaining focus on both short-term objectives and long-term strategic goals. • Collaborate closely with cross-functional teams, including cybersecurity researchers and other engineering units, to refine intelligence analytics and enhance product offerings. • Address and resolve elevated client escalations with a focus on maintaining relationships while delivering prompt and effective solutions. • Apply a solid understanding of cybersecurity and analyze dark web activities related to computer and network security. Requirements: • Significant experience in engineering management or leadership roles, particularly within data engineering or analytics teams, demonstrating a track record of success in high-pressure environments. • Strong capability in managing and guiding remote or hybrid teams, utilizing effective communication and collaboration tools to maintain team cohesion and productivity. • Understanding of Python, relevant database technologies and fundamental programming and data engineering concepts • Exceptional organizational skills, capable of turning complex requirements into actionable project plans and fostering incremental delivery within a software development framework. • Excellent communication skills, adept at conveying complex technical concepts in a clear and concise manner through various channels including emails, Slack, and in-person discussions. Benefits: • May be eligible for incentive compensation • May be eligible for equity • Medical, dental, vision, life insurance • 401K

Conduct proactive research and analysis on state-sponsored APT activity, develop detection mechanisms, mentor colleagues, collaborate with cross-functional teams, and support customer intelligence needs. | 5+ years in Information Security or Threat Intelligence with experience in technical threat analysis, malware analysis, scripting, CTI research tools, and knowledge of threat frameworks and models. | Description: • Conduct proactive research on state-sponsored APT activity by synthesizing multiple technical datasets to develop novel insights and high-quality reporting • Establish and refine methods to track APT campaigns using network, intrusion, and malware analysis • Hunt for threat actor infrastructure and activity across diverse technical data sources, leveraging banner data, service metadata, and related technical artifacts • Identify, prioritize, and deploy detection mechanisms for command-and-control infrastructure, malware families, and threat groups of interest • Continuously evaluate and improve threat intelligence workflows, identifying opportunities to enhance automation, efficiency, and analytic precision • Stay up to date on evolving APT tradecraft by regularly reviewing technical publications, blogs, and intelligence from trusted sharing communities • Mentor colleagues on intrusion analysis tradecraft and threat intelligence best practices • Collaborate with geopolitical and regional analysis teams to support cross-functional research • Propose and evaluate new data sources and analytical methods to enhance or automate the intelligence cycle • Represent Insikt Group externally as a subject matter expert through customer briefings, media engagements, or public research dissemination • Collaborate with engineering and data science teams to ensure effective integration of relevant data and analytics into the Recorded Future platform • Support customer intelligence needs through Recorded Future’s Analyst-on-Demand service Requirements: • BA/BS or equivalent experience in Computer Science, Computer Engineering, Information Security, Security Studies, Intelligence, or a related field • Preferably 5+ years of experience in Information Security and/or Threat Intelligence • Demonstrated experience conducting technical threat analysis and research • In-depth knowledge of TCP/IP and other networking protocols and datasets relevant to intrusion and network infrastructure analysis • Demonstrated capability in identifying and tracking infrastructure through methods such as banner analysis and metadata correlation • Experience with static and dynamic malware analysis, including family attribution and variant clustering • Proficiency in scripting (Python preferred, or Go, C, C++, Java) • Fluency with common CTI research tools such as Maltego, Jupyter Notebook, the Elastic Stack, and similar tools • Proven experience applying structured analytical techniques and intelligence methodologies, including the intelligence cycle, intelligence writing best practices, and frameworks such as the Diamond Model • Familiarity with MITRE ATT&CK, the Cyber Kill Chain, and related models • Detailed understanding of existing APT groups’ past activities, TTPs, motivations, and targeting patterns • Experience with open-source intelligence-gathering tools and techniques • Experience working directly with customers, with strong written and verbal communication skills • Strong interpersonal and teamwork skills, including working with globally distributed team members • Preferred: MA/MS or equivalent experience in Computer Science, Computer Engineering, Information Security, or a related field • Preferred: Experience writing network and endpoint detection signatures • Preferred: Experience with Windows, iOS, Android, macOS, or malware analysis • Preferred: Proficiency in a high-priority foreign language (Arabic, Chinese, Farsi, Korean, Portuguese, Russian, or Spanish) Benefits: • This position may be eligible for incentive compensation, equity, and medical, dental, vision, life insurance and 401K. • Your recruiter can share more about the specific details of the compensation and benefit package during the hiring process.