Software Engineer - Cybersecurity

Full-Stack Software Engineer – Cybersecurity Platform Location: India — Remote

Employment type: Full-time

Company: QuantumGenie, Inc.

About QuantumGenie QuantumGenie is a post-quantum cryptography and cybersecurity company building products for cryptographic discovery, inventory, dependency mapping, risk assessment, crypto-agility planning, and migration to quantum-safe systems.

Our platform identifies cryptography across source code, cloud infrastructure, databases, certificates, endpoints, and enterprise systems. It converts evidence into a Cryptographic Bill of Materials (CBOM), discovery records, asset inventories, and relationship maps for remediation and migration planning.

We are hiring a hands-on engineer in India to maintain and improve the complete platform: application code, integrations, data models, tests, deployments, documentation, and endpoint-agent releases.

Early-career candidates with strong practical ability are welcome. We value demonstrated ownership, technical judgment, learning speed, and careful execution over pedigree.

What you will own Maintain and extend a production Node.js and Express application written primarily in JavaScript, with newer TypeScript and React interfaces.

Diagnose problems across frontend pages, backend services, APIs, authentication, scheduled jobs, data pipelines, and MongoDB.

Maintain integrations with cloud, source-control, database, endpoint-security, PKI, and observability platforms.

Work with REST APIs, OAuth, access tokens, webhooks, SDKs, pagination, rate limits, retries, background jobs, and least-privilege permissions.

Improve schemas supporting assets, agents, discovery runs, evidence, CBOM records, relationships, connectors, releases, and tenant-scoped data.

Maintain workflows for connecting systems, running scans, reviewing findings, and exporting results.

Support our Go endpoint agent and its Linux and Windows releases, including services, registration, telemetry, discovery, signed updates, and rollback.

Troubleshoot Linux, Windows Server, cloud, proxy, firewall, DNS, TLS, private-CA, and MongoDB connectivity issues.

Write and maintain unit, integration, and browser tests using Node’s test runner, Vitest, Playwright, and Testing Library.

Take production issues from logs and reproduction through root cause, controlled fix, verification, and documentation.

Turn customer and pilot requirements into small, reviewable improvements with the founders.

Core technical requirements We expect practical proficiency in most of the following:

JavaScript, TypeScript, and Node.js, including asynchronous programming, APIs, validation, error handling, and production debugging.

Express or a comparable backend framework, including routing, middleware, authentication, authorization, rate limiting, and secure API design.

React, HTML, CSS, Vite, responsive interfaces, and component-level testing.

MongoDB, including document modelling, indexes, aggregation, migrations, tenant-scoped queries, performance analysis, and safe production changes.

Git and GitHub workflows: branches, pull requests, code review, merge-conflict resolution, release tagging, and repository hygiene.

Automated testing: reproducing defects, choosing meaningful tests, and proving that fixes work.

Linux command-line administration and basic Windows/PowerShell familiarity.

Cloud operations in at least one of AWS, Microsoft Azure, Google Cloud, or DigitalOcean. Experience with more than one is preferred.

Containers, environment variables, secrets, logs, health checks, networking, DNS, TLS, and controlled releases.

Secure third-party APIs: credentials, permissions, response normalization, retries, recovery, and auditability.

Ability to safely navigate a mixed codebase containing JavaScript, TypeScript, Go, Python, Bash, and PowerShell, even if JavaScript/TypeScript is your strongest area.

AI-assisted engineering QuantumGenie uses AI coding agents. You must be comfortable with OpenAI Codex and similar cloud-based tools while retaining human ownership of every result.

You should be able to:

Give an AI coding agent precise context, constraints, and acceptance criteria.

Inspect repository instructions and architecture before changing code.

Review generated code and diffs for correctness, security, maintainability, and unintended effects.

Preserve unrelated work, protect credentials, and run appropriate tests and deployment validation.

Recognize unsupported generated answers and verify them against source code, logs, documentation, or a controlled test.

Google Cloud Code, cloud CLI, or remote-development experience is useful. Prompting alone is insufficient; sound engineering fundamentals are required.

Cybersecurity and infrastructure knowledge You do not need to be a cryptographer on day one, but you must be interested in cybersecurity and willing to learn post-quantum cryptography. Familiarity with any of the following is valuable:

TLS, HTTPS, certificates, certificate chains, certificate authorities, public/private keys, key rotation, PKI, KMS, HSMs, and secrets management.

RSA, ECC, ECDSA, AES, SHA, SSH, IPsec, and modern post-quantum standards.

Servers, VMs, endpoints, containers, APIs, databases, DNS, proxies, firewalls, gateways, load balancers, and cloud relationships.

Source-code and dependency scanning, SBOM/CBOM concepts, CycloneDX, evidence provenance, and security findings.

Endpoint telemetry, filesystem scanning, operating-system services, network connections, and the distinction between connection metadata and packet capture.

Enterprise identity, least privilege, role-based access control, tenant isolation, audit logging, and secure credential handling.

Microsoft Defender, CrowdStrike Falcon, Qualys, Palo Alto Cortex, Splunk, ServiceNow, or comparable enterprise platforms.

Enterprise software, banking technology, cloud security, security operations, PKI, or infrastructure experience is strongly preferred.

Endpoint and release engineering The platform includes a Go endpoint agent. Go experience is helpful, but willingness to learn is acceptable.

Relevant experience includes:

Linux systemd and Windows services.

MSI, ZIP, RPM, and tar.gz packaging.

Bash and PowerShell.

SHA-256 checksums and code signing.

Secure device enrollment and identity.

Telemetry protocols.

Remote software updates and rollback.

Testing on Linux and Windows virtual machines.

What good performance looks like You take problems from reproduction through root cause, implementation, testing, documentation, and release.

You distinguish customer data from demonstration data and prevent information from crossing tenant boundaries.

You make small, reviewable changes and explain their operational impact.

You verify claims by reading code and running the system rather than relying on assumptions.

You protect secrets and keep schemas, release records, and operational documentation current.

You communicate early when a requested capability is a prototype, partially implemented, or dependent on customer access.

Preferred background Approximately 2–5 years in software engineering, platform engineering, DevOps, cloud, or cybersecurity. Strong candidates outside this range are welcome.

A degree in computer science, information technology, cybersecurity, or a related field, or equivalent practical experience.

Evidence of maintaining a real application, service, integration, or customer deployment.

Multi-tenant SaaS or regulated-industry experience.

Clear written English for technical documentation and customer communication.

Personal qualities Curious about cybersecurity, cryptography, infrastructure, and how complex enterprise systems fit together.

Enthusiastic about learning post-quantum cryptography and contributing to an emerging field.

Reliable, methodical, and comfortable taking ownership in a remote environment.

Able to work independently while raising risks and uncertainty promptly.

Honest about what is implemented, what has been tested, and what remains to be built.

What we offer Fully remote work from India.

Direct founder collaboration and ownership of a live cybersecurity platform.

Exposure to post-quantum cryptography, CBOM, cloud security, endpoint engineering, and enterprise integrations.

Work spanning product engineering, infrastructure, security, and customer pilots.

Strong learning opportunities as post-quantum security evolves.

Seniority level: Entry level

Employment type: Full-time

Industries: Technology, Information and Internet