---
title: 'Software Engineer - Platform / Core Infrastructure - Americas at XBOW'
canonical: 'https://feeny.ai/job/software-engineer-platform-core-infrastructure-americas-xbow-united-states-smr5j5myq41a'
type: 'job'
last_seen: '2026-09-12'
---

# Software Engineer - Platform / Core Infrastructure - Americas at XBOW

- **Company:** XBOW
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-03-18
- **Last confirmed live:** 2026-09-12
- **Apply:** https://jobs.ashbyhq.com/xbowcareers/b3c887f9-6c81-4179-a006-d5e02579ba67

## Job description

## About XBOW

Build the future of offensive security with XBOW. Attackers are already using AI to move faster than defenders can react—we’re creating the platform that puts security ahead in the arms race. Our AI-powered system autonomously discovers, validates, and even exploits vulnerabilities, giving organizations proof-backed results in hours instead of weeks. Founded by Oege de Moor, creator of GitHub Copilot, and backed by Sequoia, Altimeter, and other leading investors, XBOW is applying cutting-edge AI to one of the world’s most urgent problems. In just over a year, our AI, built by a world-class AI team and legendary security researchers — has uncovered thousands of real-world zero-days across the software billions rely on, and became the first autonomous system to reach number 1 on HackerOne. We’re a team of builders, hackers, and researchers who thrive on solving problems others think are impossible. If you want to push the boundaries of AI, reshape how security is done, and join the group defining this new era of defense — we’d love to talk.

## Your Role

We’re looking for a Software Engineer - Platform / Core Infrastructure who’s passionate about building scalable systems and solving hard problems in ambiguous environments. In this role, you’ll design and implement the complex distributed infrastructure that powers our core AI engine and distributed analysis systems, enabling XBOW to run seamlessly across multiple cloud providers (AWS, Azure, OCI etc.) and contexts (SaaS, on prem). This is a role for someone who sees infrastructure as a product, loves clean abstractions, and knows how to dig into performance issues across layers. You’ll join a high-trust, high-velocity team where your work will have an immediate impact on both developer experience and product performance. If you like being at the intersection of deep tech and real-world impact, you’ll feel right at home.

## What You'll Do

- Design and implement infrastructure systems that scale reliably and securely, and can be deployed across multiple cloud environments (AWS, Azure, OCI etc.) and contexts (SaaS, on prem).
- Tune and optimize cloud services across compute, storage, networking, and observability to drive performance, reliability and maintainability of core services.
- Develop our core services, written in TypeScript, Kotlin and Go (and pick them up quickly if you haven’t used them before) to support our unique deployment and infrastructure requirements.
- Support large-scale systems with event driven architectures.
- Own problems end-to-end—from design through deployment to production support
- Navigate ambiguity and help define how we build as much as what we build
- Partner closely with other engineers, AI researchers and Security researchers to enable high-quality, high-velocity product development
- Design for resilience by implementing disaster recovery and business continuity strategies that ensure uptime, even when things break
- Improve how we build, deploy, and monitor services at scale

## Who You Are

- Strong experience building and operating scalable, distributed systems on cloud infrastructure such as AWS or similar.
- Extensive experience with Containerisation and Orchestration technologies (e.g. Docker and Kubernetes).
- Comfortable working with infrastructure as code (e.g., Terraform, CDK) and see infra as part of the engineering system—not something separate from it.
- Experience with event-driven architectures, message queues, or async workflows (for example, using Kafka).
- A track record of performance tuning across cloud services, databases, and compute layers
- Eager to learn new tools, languages, and technologies as needed
- A thoughtful communicator who values clarity and simplicity and is comfortable working in a fast-paced startup and navigating ambiguity
- Strong problem-solving skills and the ability to work with incomplete information
- Curious, practical, and eager to work across layers of the stack when needed
- You think proactively about failure modes and bring experience implementing disaster recovery and business continuity plans that keep critical systems running.

Bonus If You Have

- Experience with deploying infrastructure to multiple environments (SaaS, on-prem) and know how to build resilient systems that handle the complexity of such environments.
- Familiarity with modern observability practices (logs, metrics, tracing) and how to apply them
- Experience working in an early stage startup
- Prior experience building developer tooling or security products
- Hands-on experience with OpenSearch or Elasticsearch at scale
- Previous experience building platform teams or working on internal developer platforms

## What We Offer

- Compensation & Equity: Competitive salary and a generous equity package, making you a true owner of the company.
- Career Growth: Shape your role, lead the function, and grow with the company as we redefine cybersecurity.
- Meaningful Work: You will tackle technically complex challenges and play a pivotal role in the growth of our business, working alongside an amazing team and some of the world’s experts to shape how AI transforms cybersecurity.

What Else You Should Know

- Location: Remote in the US or EMEA (all team members are remote but we meet regularly and you’re supported to travel to collaborate with colleagues in person)
- Contract: Full-time.
- Hiring Process:
- 45-min introductory chat with our Talent team.
- 45 minutes with an Engineering Lead.
- 2-3 hour pair programming session with two members from the team.
- 30-min final wrap-up call with an Engineering Lead.

We believe in people who are driven by curiosity and a willingness to learn. Even if you don't check every box, we encourage you to apply if you're excited about the role and our mission.

## About XBOW

## Company Overview
- **One-liner**: XBOW provides an autonomous offensive security platform that uses AI to continuously discover and prove exploitable vulnerabilities in applications and APIs.
- **Entity Type**: Private (Series C, $272M total funding)
- **Headquarters**: Seattle, Washington, United States
- **Founded**: 2024
- **Founders**: Oege de Moor (CEO)

## Core Business
- **Primary industry**: Computer and Network Security (offensive security / penetration testing)
- **Target customers**: Enterprise security teams (B2B) – 150+ customers including large organizations
- **Mission/purpose**: Transform application security with AI-powered continuous offense, redefining cyber defense for the AI era. Autonomous offense is the best defense.

## Products & Services
- **XBOW Platform (SaaS)**: An autonomous AI agent that explores applications and APIs like a real attacker, chains vulnerabilities into working exploits, and proves exploitability. Every finding includes a complete case file with attack path, working exploit, logs, and remediation guidance. Integrates with existing workflows and compliance requirements (SOC 2, ISO 27001, PCI DSS, NIS 2).

## Market Standing
- **Valuation**: Not publicly available
- **Key Metric**: Total funding – $272M (as of May 2026)
- **Notable Investors/Partners**: DFJ Growth, Northzone, Nat Friedman, Sequoia Capital, and others (6 investors in Series C, 2 in Series A)
- **Growth Signals**:
  - Headcount: 158 employees (+711.4% YoY)
  - 24 active job postings (as of mid-2026)
  - Ranked #1 Autonomous System on HackerOne, above every human researcher
  - Found a 9.8 critical Microsoft flaw completely on its own
  - 14,000+ findings in real customer applications
  - 150+ security teams using the platform
  - Named a Winner in Fast Company’s 2026 World Changing Ideas Awards

## Competitive Advantages
- **Full autonomy with enterprise governance**: XBOW operates continuously without human intervention, yet every action is logged and auditable, meeting compliance standards.
- **Proof, not noise**: Every finding is a real, reproducible exploit with near-zero false positives – not just a scanner alert.
- **Proven against top human researchers**: Ranked #1 on HackerOne’s leaderboard and publicly demonstrated by finding a critical Microsoft flaw.
- **Depth of exploitation**: Chains multiple vulnerabilities into real attack paths that traditional scanners and point-in-time pentests miss.

## Strategic Focus
- **Scale continuous testing**: Enable customers to test every application continuously as it changes, scaling with attack surface not headcount.
- **Expand global presence**: Operates in 17 countries (US, UK, Spain, Argentina, Netherlands, Denmark, South Korea, etc.) with growing sales and field engineering teams.
- **Deepen AI capabilities**: Head of AI and research team (34 people) focused on advancing autonomous reasoning for offensive security.

## Why Work Here
- **Remote-first culture**: “Work from wherever you’re most productive” – globally distributed team across 17 countries.
- **Flexible PTO** and **competitive salary & equity** with ownership in the company.
- **Benefits**: Health, dental & vision insurance, 401k/pension match, long-term financial support.
- **Values-driven**: Move fast, solve what matters, win as one, practice transparency & candor, own the outcome.
- **High-growth environment**: 711% headcount growth in one year; opportunity to shape a fast-scaling security startup.
- **Notable perks**: Built by creators of GitHub Copilot and GitHub Advanced Security; strong engineering and research culture.
- **Caveats**: Employer rating on LinkedIn is 3.0/5.0 from 4 reviews (work-life 3.5, compensation 3.1, culture 3.2, career 3.1) – sample size is very small.

## Sources
1. [xbow.com](https://xbow.com/)
2. [xbow.com/about](https://xbow.com/about)
3. [xbow.com/leadership](https://xbow.com/leadership)
4. [linkedin.com/company/xbow](https://www.linkedin.com/company/xbow)
5. [jobs.ashbyhq.com/xbowcareers](https://jobs.ashbyhq.com/xbowcareers)

## Other roles at XBOW

- [Information Security Analyst, GRC](https://feeny.ai/job/information-security-analyst-grc-xbow-europe-y1cdstyhycmz) — Europe
- [Senior Legal Counsel - Commercial](https://feeny.ai/job/senior-legal-counsel-commercial-xbow-united-states-wwz13mxpf19y) — United States
- [Growth Marketing Director](https://feeny.ai/job/growth-marketing-director-xbow-united-states-g6fykcedwdt0) — United States
- [Regional Marketing Manager](https://feeny.ai/job/regional-marketing-manager-xbow-europe-cgme9yx6zdyf) — Europe
- [Software Engineer - Platform / Core Infrastructure - EMEA](https://feeny.ai/job/software-engineer-platform-core-infrastructure-emea-xbow-europe-d0hkkq3gkb0v) — Europe
- [Software Engineer - AI Systems](https://feeny.ai/job/software-engineer-ai-systems-xbow-austria-n63hyfqfwkzx) — Austria
- [Regional Marketing Lead](https://feeny.ai/job/regional-marketing-lead-xbow-united-states-px345ps9c4vq) — United States
- [Enterprise Account Executive - Offensive Security](https://feeny.ai/job/enterprise-account-executive-offensive-security-xbow-south-korea-n2ys1f1d81ar) — South Korea
- [Field Engineer - Application / Offensive Security](https://feeny.ai/job/field-engineer-application-offensive-security-xbow-south-korea-5ydyvf9bzyg9) — South Korea
- [Solutions Architect - Offensive/Application Security (Australia)](https://feeny.ai/job/solutions-architect-offensive-application-security-australia-xbow-australia-8qc74ewms0d2) — Australia