Filigran
Filigran, founded in October 2022, stands out in the cybertech ecosystem for its commitment to revolutionizing cyber threat management with a proactive approach. Its mission is to develop innovative open-source solutions designed to anticipate cyber threats, identify security gaps, and strengthen organizational security posture.
Filigran solutions are now trusted by over 6,000 public and private organizations worldwide.
The Role
We're looking for a Senior Software Engineer with deep expertise in software quality, testing, and continuous integration to join the XTM Foundation team — Filigran's cross-product engineering team responsible for architecture, quality, shared tooling, and technical standards across the XTM Suite (OpenCTI, OpenAEV, OpenGRC).
You will own the quality and CI engineering mission across all three products: raising test coverage, building robust and reliable pipelines, and establishing practices that 60+ engineers can adopt and benefit from every day. This is not a QA role — it's a senior engineering role where quality and CI are first-class engineering concerns, not afterthoughts.
This is a high-impact, hands-on role. You'll audit what exists, identify the highest-leverage improvements, build the tooling and standards, and work directly with product teams to roll them out. You'll be the person who makes quality a competitive advantage for Filigran's engineering culture.
Your Responsibilities
- Audit the current state of test coverage and CI pipelines across the OpenCTI, OpenAEV, and OpenGRC — identify critical gaps and define a prioritised roadmap to address them.
- Define and implement a cross-product test strategy covering unit, integration, end-to-end, and contract testing — adapted to each layer of the stack (GraphQL API, TypeScript/React frontend, Node.js/Java backend, Python connectors).
- Lead the consolidation and standardisation of CI/CD pipelines towards GitHub Actions, introducing quality gates (coverage thresholds, mutation testing, flakiness detection, static analysis) as first-class pipeline steps.
- Build shared test tooling, templates, and libraries that product teams can adopt with minimal friction — reducing the cost of writing good tests.
- Introduce and maintain performance and load testing practices where none currently exist, establishing baselines and regression detection for critical system paths.
- Define and enforce standards for test reliability and pipeline speed — flaky tests and slow pipelines are engineering debt you'll actively reduce.
- Work closely with product engineering teams to embed quality practices in their day-to-day workflows, providing guidance, code reviews, and hands-on pairing where needed.
- Stay current with the testing, CI/CD, and AI-assisted engineering landscape — evaluating new tools, LLM-based test generation approaches, and agentic testing frameworks, and bringing well-reasoned proposals to the team.
Who You'll Work With
- Reports to: VP of Technology.
- Key collaborators: Staff Engineers and Engineering Managers across OpenCTI, OpenAEV, and OpenGRC product teams; VP of Technology; CTO.
- Working model: You will split your time between XTM Foundation team work (auditing, tooling, standards definition) and embedded collaboration with product teams to implement and validate changes in real-world conditions.
About XTM Foundation
XTM Foundation is Filigran's cross-product engineering team, created to raise the technical bar across the entire XTM Suite. The team owns the problems that no single product team can solve alone: shared architecture, inter-product communication standards, common UI components, CI/CD infrastructure, test quality, developer experience, and AI-assisted development practices.
XTM Foundation engineers work closely with all product teams — not as gatekeepers, but as force multipliers. They bring deep expertise, evaluate new approaches before rolling them out at scale, and help 60+ engineers build better software, faster.
Why Join Filigran? More than just a job.
We’re a fast-growing, global, and fully remote company building open-source cybersecurity solutions, increasingly powered by AI, to help defense teams anticipate threats and act faster.
⭐ What we believe
We believe we do work that matters, uniting defenders into a global community to make security more open, resilient & collaborative.
💻 How we work
We do work that matters by combining strong engineering standards with emerging technologies, including AI, to move faster and smarter.
🧭 What guides us
We make our work matter by building a culture grounded in our CORE values of Cohesion, Openness, Responsibility, and Equity. The principles that guide how we make decisions, treat people, and grow together, especially when no one’s watching.
💰 Compensation & Benefits
- Competitive pay + equity - everyone shares in our success
- Remote-first, flexible, and balanced - work that fits your life
- Your setup, your choice - pick the gear that works for you
- Twice-a-year gatherings - we meet in person for regional and global offsites to connect, collaborate, and strengthen our culture beyond the screen
Profile We're Looking For
- 7–12 years of experience in software engineering, with a strong and deliberate focus on quality engineering and CI/CD.
- Deep expertise in test strategy and architecture: you know when to write a unit test, an integration test, or an E2E test — and you can explain the tradeoffs clearly.
- Hands-on experience building and maintaining CI/CD pipelines at scale — you've designed pipelines that are fast, reliable, and developer-friendly, not just functional.
- Comfortable across a polyglot stack: TypeScript/React on the frontend, Node.js or Java on the backend, Python for integrations — you don't need to be an expert in all, but you can navigate each and apply the right testing approach.
- Experience with modern test tooling: Playwright, Vitest, Jest, Cypress, or equivalents; mutation testing frameworks (e.g. Stryker); contract testing (e.g. Pact); static analysis and linting pipelines.
- Strong understanding of software quality metrics — coverage, mutation score, flakiness rates, pipeline duration — and how to use them to drive meaningful improvement rather than gaming numbers.
- Excellent written communication skills — you can turn a quality audit into a clear, prioritized action plan that engineers and leadership can act on.
- Comfortable working in a remote-first, async culture with teams across multiple time zones; clear communicator in English.
- Autonomy and ownership mindset: you identify problems, propose solutions, and drive them to completion — you enable others rather than becoming a bottleneck.
- Bonus: experience with performance/load testing tools (k6, Gatling, Locust, or equivalents); hands-on use of AI-assisted test generation tools (GitHub Copilot, Cursor, LLM-based test scaffolding); open-source contributions or maintainership; experience rolling out quality standards across large engineering teams; cybersecurity domain knowledge.
