---
title: 'Staff Software Engineer - Detection Platform (GoLang) at Huntress'
canonical: 'https://feeny.ai/job/staff-software-engineer-detection-platform-golang-huntress-united-states-of-mqjz6mkjd3gz'
type: 'job'
last_seen: '2026-09-15'
---

# Staff Software Engineer - Detection Platform (GoLang) at Huntress

- **Company:** Huntress
- **Location:** United States of, United States
- **Posted:** 2026-09-03
- **Last confirmed live:** 2026-09-15
- **Apply:** https://job-boards.greenhouse.io/huntress/jobs/7977228003

## Job description

Reports to: Engineering Manager

Location: Remote US

Compensation Range: $200,000 - $220,000 base plus bonus and equity

What We Do:

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.

Huntress now secures more than 5M endpoints and 14M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.

## About the Team

Huntress protects the small and mid-sized businesses that attackers assume can't afford a security team. The Detection Platform team builds the engines and pipelines that turn billions of raw telemetry events into the signals our 24/7 SOC acts on. Every detection Huntress ships, across endpoint, identity, SIEM, and third-party EDR, runs through systems this team owns. We measure ourselves on two things: time to detection and detection engine uptime.

## About the Role

We're hiring a Staff Software Engineer to help build and rebuild these systems without disrupting the SOC that depends on them, and to make their behavior predictable under load. This is a hands-on technical leadership role: you'll lead major workstreams, set direction that other engineering teams build against, and write and review production code every week.

## What You'll Own

- Detection engine and pipeline modernization. We're rewriting our detection engine to support the full Sigma v2 specification, including stateful correlation of patterns across many events over time. In parallel, we're reworking several existing detection pipelines and building new ones, moving off the bespoke per-product detectors we've accumulated and onto a common platform. You'll lead major workstreams across both and own the validation approach that proves a reworked pipeline still behaves like the one it replaces, so we can turn old paths off knowing we haven't lost anything.
- Reliability and behavior under load. A detection pipeline that quietly stops producing signals is worse than one that crashes loudly, and detection volume spikes for reasons we don't always control. You'll build the guarantees that make quiet failure impossible: end-to-end latency measurement, liveness coverage, and alerting that fires when expected work stops arriving. You'll also build the mechanisms that keep a spike bounded and recoverable.
- Event schemas and data contracts. Our schema and transformer layer are what several other engineering teams build their detections against. You'll help drive toward a coherent internal standard and build the validation and drift-detection tooling that catches upstream changes before they break detections.

## What We're Looking For

Required

- Deep experience designing, building, and operating production distributed systems at scale, primarily in Go, with the range to work across several layers of the stack.
- You have replaced or substantially re-architected a live, high-throughput system without breaking its consumers, and you can walk us through how you proved the new path was equivalent, staged the cut-over, and decided it was safe to retire the old one.
- Experience with high-volume event or data pipelines, and a good feel for how they behave under load: where things queue, where they fall behind, and what happens to correctness when they do.
- Strong operability instincts. You design observability in rather than retrofitting it, and you've built alerting that catches the absence of expected work, not just errors.
- Demonstrated technical leadership across team boundaries. You've set a direction that other teams had to build against and raised the engineering bar around you, without needing positional authority.
- Judgment about production quality: when a system is good enough to ship, when it needs more evaluation, and when it shouldn't ship at all.
- Hands-on experience with AI coding tools, and a point of view on using them well, where correctness is a security outcome.

Strongly Preferred

- A background in security operations or security engineering: time spent writing or tuning detections, or working in a SOC. You know what makes a detection maintainable, how fast noise erodes a SOC's trust in its tooling, and why a missed detection is a different class of failure than a noisy one.
- Experience with detection-as-code or other rule- and DSL-driven systems, including the parsing and evaluation work that supporting a specification properly entails.
- Experience building platform tooling for non-engineer authors such as rule writers, analysts, and researchers, where the product surface is a language, an API, and a feedback loop.
- Ruby on Rails experience. Some of our pipeline and application code is Rails, and you'll occasionally read and review Ruby. It's a nice-to-have, not a requirement; we'll help you ramp.

## Our Stack

You'll work primarily in Go across our detection engines, pipelines, and the services around them, with Kafka, Temporal, Redis, ClickHouse, Elasticsearch, and Kubernetes across AWS and Azure. Some of our pipeline and application code is Ruby on Rails. Detection logic is written in Sigma.

We don't expect prior experience with all of it, and we're not screening on the list; Go is the one language we'll assess directly in interviews. You should be someone who likes being fluent across a broad stack rather than being specialized in one corner of it.

What We Offer:

- 100% remote work environment - since our founding in 2015
- Generous paid time off policy, including vacation, sick time, and paid holidays
- 12 weeks of paid parental leave
- Highly competitive and comprehensive medical, dental, and vision benefits plans
- 401(k) with a 5% contribution regardless of employee contribution
- Life and Disability insurance plans
- Stock options for all full-time employees
- One-time $500 reimbursement for building/upgrading home office
- Annual allowance for education and professional development assistance
- $75 USD/month digital reimbursement
- Access to the BetterUp platform for coaching, personal, and professional growth

Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.

We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.

We do discriminate against hackers who try to exploit businesses of all sizes.

Accommodations:

If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com. Please note that non-accommodation requests to this inbox will not receive a response.

Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our [Candidate Privacy Notice](https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&source=click) for more details on our practices and your data privacy rights.

#BI-Remote

## About Huntress

## Company Overview
- **One-liner**: Huntress provides a fully managed cybersecurity platform that protects small and medium-sized businesses from hackers via threat detection, endpoint security, and identity protection.
- **Entity Type**: Private (Series D)
- **Headquarters**: Fulton, Maryland, USA (fully remote company)
- **Founded**: 2015
- **Founders**: Kyle Hanslovan, John Ferrell, and Chris Bisnett (former NSA cyber operators)

## Core Business
- **Primary industry**: Cybersecurity (Managed Detection and Response, Endpoint Security, Identity Threat Detection)
- **Target customers**: B2B — primarily small and medium businesses (SMBs) and the managed service providers (MSPs) that support them. Also serves mid-market enterprises.
- **Mission**: To break down the barriers to enterprise-level security and empower the businesses that the big names overlook.

## Products & Services
- **Huntress Managed EDR**: Endpoint detection and response that monitors, hunts, and responds to threats across endpoints.
- **Huntress Managed ITDR** (Identity Threat Detection and Response): Monitors and protects Microsoft 365 identities and environments from account takeover and identity-based attacks.
- **Huntress Managed SIEM**: A fully managed security information and event management service that ingests and correlates log data for threat detection.
- **Huntress Security Awareness Training**: Phishing simulations and security training to reduce human risk.
- **Huntress Security Platform**: The unified platform that integrates all of the above, providing a single pane of glass for partners.

## Market Standing
- **Valuation**: Not publicly disclosed (latest round was $150M Series D in 2024).
- **Key Metric**: $100M+ ARR (achieved in 2024).
- **Total Funding**: Over $228M (Series A: $18M in 2022, Series C: $60M in 2023, Series D: $150M in 2024).
- **Notable Investors/Partners**: Not named directly in available data, but notable partnerships include Microsoft (Verified SMB Solution), Forte Racing, and the CISA Joint Cyber Defense Collaborative (JCDC).
- **Growth Signals**: 
  - Protects 4M+ endpoints and 8M+ identities worldwide.
  - Named to Inc. 5000 Fastest Growing Private Companies list.
  - Won Inc. Best Places to Work award (2024).
  - Named to Forbes America’s Best Startup Employers list (2025).
  - Achieved CMMC compliance and authorized as a CVE Numbering Authority.
  - Included in Verizon 2025 DBIR Report.
  - 630 total employees and growing.

## Competitive Advantages
- **One Team advantage**: Technology and SOC (Security Operations Center) are inseparable — the platform is built for and operated by the same team, ensuring detection and response are tightly coupled.
- **Founding team pedigree**: Founded by former NSA cyber operators, giving deep domain expertise in adversary tactics.
- **SMB focus**: Specifically targets the underserved SMB market with enterprise-grade security at an affordable SaaS price.
- **Fully managed**: Unlike many tools that require in-house security teams, Huntress provides a complete managed service, making it accessible to underresourced IT teams.
- **Adversary-informed defense**: Uses real-world threat intelligence and continuous hunting to stay ahead of attackers.

## Strategic Focus
- **Current priorities**: Scaling the platform to protect more SMBs, expanding the managed SIEM offering, deepening identity protection, and maintaining leadership in the MSP channel.
- **Growth direction**: International expansion (currently hiring in US, Canada, UK, Ireland, and Australia), continued product innovation, and strengthening partnerships with Microsoft and CISA.
- **Public commitment**: Signed the CISA Secure By Design pledge, indicating a focus on security-by-design and transparency.

## Why Work Here
- **100% Remote**: Huntress has been fully remote from day one, with a global team across US, Canada, UK, Ireland, and Australia. They provide tools, systems, and processes to succeed outside a corporate office.
- **Culture**: Values-driven with a focus on being a “force for good.” Core values are Own It, Elevate It, and Send It — emphasizing accountability, mutual support, and bold action.
- **Benefits**:
  - 5% 401k contribution (even if you don’t contribute).
  - Stock options for all full-time teammates.
  - 12 weeks paid parental leave.
  - Monthly digital reimbursement for internet/phone.
  - Starter home office reimbursement.
  - Medical, dental, vision, life, disability, and pet insurance.
  - Education assistance (LifeLabs, BetterUp coaching, hands-on training).
  - Generous PTO, sick time, bereavement leave, and floating holidays.
- **Growth opportunities**: Committed to teammate development with training, coaching, and education assistance programs.
- **Awards**: Inc. Best Places to Work, Built In Best Remote Places to Work, Forbes America’s Best Startup Employers.
- **Team size**: 630 employees and growing.

## Sources
1. [huntress.com](https://www.huntress.com/)
2. [huntress.com/company/careers](https://www.huntress.com/company/careers)
3. [huntress.com/company/our-story](https://www.huntress.com/company/our-story)
4. [job-boards.greenhouse.io/huntress](https://job-boards.greenhouse.io/huntress)
5. [builtin.com/company/huntress](https://builtin.com/company/huntress)

## Other roles at Huntress

- [Staff Platform Engineer](https://feeny.ai/job/staff-platform-engineer-huntress-united-states-of-0gsbbe3p95qv) — United States of, United States
- [SOC Support Specialist- Central Time Zone](https://feeny.ai/job/soc-support-specialist-central-time-zone-huntress-united-states-of-frrqsj63s4vc) — United States of, United States
- [Security Operations Analyst - Weekend 4x10 Shift](https://feeny.ai/job/security-operations-analyst-weekend-4x10-shift-huntress-united-states-63qqbafjtatd) — United States
- [Channel Account Manager II, Service Provider](https://feeny.ai/job/channel-account-manager-ii-service-provider-huntress-united-states-of-4a156y351f5n) — United States of, United States
- [SOC Support Specialist- Eastern Time Zone](https://feeny.ai/job/soc-support-specialist-eastern-time-zone-huntress-united-states-of-s6s33nwb62yp) — United States of, United States
- [QMS Manager](https://feeny.ai/job/qms-manager-huntress-united-states-of-my96yze8496r) — United States of, United States
- [SOC Support Specialist- UK Weekend Shift](https://feeny.ai/job/soc-support-specialist-uk-weekend-shift-huntress-united-kingdom-yxa6hs1b59hj) — United Kingdom
- [SOC Support Specialist- Ireland Weekend Shift](https://feeny.ai/job/soc-support-specialist-ireland-weekend-shift-huntress-ireland-zzkn0ggt02zh) — Ireland
- [Associate Channel Account Manager - Service Providers](https://feeny.ai/job/associate-channel-account-manager-service-providers-huntress-united-states-of-tfemdd54ze0p) — United States of, United States
- [Manager, Security Operations Center](https://feeny.ai/job/manager-security-operations-center-huntress-united-states-of-qmh0yadyj2m8) — United States of, United States