Posted on 22 July 2026
up to $200,000 + Equity
Permanent
Los Angeles, CA
32482
Opportunity description
Job Title:
Principal Software Engineer
As a Software Engineer, you will join our founding engineer to build the foundation of a category-defining company alongside a world-class team. This is a high-ownership, high-impact role where your decisions will shape the company's trajectory for years to come. This isn't maintenance engineering. Your decisions will define how enterprises run, customize, and trust a new next generation of AI-driven incident response preparedness.
Responsibilities
- Own tabletop exercise UX from scenario design through live facilitation to after-action reporting.
- Apply IR/tabletop domain expertise so scenarios, agent behavior, and reports feel credible and operationally useful.
- Fine-tune prompts and LLM workflows for coherence, realism, structured outputs, and production reliability, including expansion beyond cybersecurity cases.
- Build and improve the generation engine and real-time facilitator/voice systems that power live exercises.
- Ensure generated content aligns with real IR workflows: injects, escalation, attacker/defender dynamics, and actionable post-exercise recommendations.
- Work full-stack to connect AI quality with a product security teams actually want to use.
- Collaborate with customers to enhance usability, user experience.
- Set technical standards for prompt evaluation, output QA, and attention to detail across the platform.
Skills & Experience
- Hands-on experience with incident response, security operations, or participating in tabletop exercises
- Ability to judge whether AI-generated scenarios, facilitator behavior, and reports are credible, coherent, and useful for preparedness
- Deep familiarity with AI/LLM trends and production application.
- Demonstrated focus on usability and user experience
- Strong attention to detail in customer-visible behavior (live session polish, error states, progress visibility, and content accuracy)
- Desired: Working knowledge of IR workflows: detection, triage, escalation, containment, communications, and after-action review.
Technology Requirements
- Python, TypeScript, Node.js / React
- LLMs (prompting, orchestration, evaluation)
- AWS
- PostgreSQL, MongoDB
- Cursor (AI-assisted development)
- Recall.ai (meeting/voice/video integrations)
- WebSockets (real-time transport), SSE (Server-Sent Events)
- Experience building MCPs and Skills
