Senior Software Engineer - OpenGRC

About this role

## The Company

Filigran, founded in October 2022, stands out in the cybertech ecosystem for its commitment to revolutionizing cyber threat management with a proactive approach. Its mission is to develop innovative open-source solutions designed to anticipate cyber threats, identify security gaps, and strengthen organizational security posture.

Filigran solutions are now trusted by over 6,000 public and private organizations worldwide.

## The Role

We're building a new product from scratch, and we're looking for an engineer to help lay the foundations.

Traditional GRC tools score risk with static checklists and a gut-feel "High / Medium / Low." We think that's broken. OpenGRC turns live threat data into something a CISO can actually act on, and put a dollar figure on. It correlates real-time threats to a company's assets, verifies whether their defenses actually hold, and translates the gaps that remain into money. You'll work in a small squad to define the architecture and ship the product, and your hardest problems will be:

• **Correlation:** linking real-time CTI feeds to a company's internal assets and security controls.
• **Verification:** folding in real exposure results to tell proven defenses apart from assumed ones.
• **Quantification:** calculating financial risk on the fly as the threat landscape shifts.

## What You’ll Build

• **Build the OpenGRC engines.** Correlation links threats to assets, verification leans on OpenAEV to test whether controls actually stand, and quantification turns the proven exposure into money.
• **Own the stack end to end.** A clean, scalable single-page app that runs both as SaaS and on-prem, with **React + TypeScript** on the front, **Node.js** on the back, and **PostgreSQL** underneath.
• **Move fast, then move right.** Prototype to test an idea, refactor when the product proves you wrong. The vision will shift with user feedback, and the code should keep up.
• **Shape the product, not just the code.** As an ...