Senior Software Engineer

About Blackpanda: Blackpanda is transforming the landscape of digital emergency response. We deliver exceptional cyber monitoring and incident response services throughout Asia at a significantly reduced cost compared to traditional models. Our innovative Attack Surface Management technology, coupled with cyber insurance and a dedicated team of regional responders, empowers organizations to swiftly manage cyber threats and minimize operational disruptions. Having achieved product-market fit, our flagship IR-as-a-Service platform is experiencing consistent growth. We have successfully secured a $15M Series A funding round from Primavera and Gaw Capital, alongside strategic partnerships with leading firms such as Softbank in Japan, Singtel in Singapore, and Macroview HGC in Hong Kong, among others. Join us in scaling a proven, revolutionary model across Asia and beyond, making digital emergency services as accessible and reliable as traditional public services. Our Mission: To democratize cyber resilience. Our Vision: A future where organizations of all sizes can access top-tier cyber incident response and insurance solutions, enabling secure and sustainable business operations. What we are looking for: At Blackpanda, technology is central to our operations. We seek a seasoned backend engineer who thrives on hands-on projects and is eager to grow into a leadership role within a diverse engineering team, developing industry-leading architecture and security products. As we envision the future of cyber risk protection in the APAC region, you will play a pivotal role in building that future. This position is ideal for someone enthusiastic about creating applications, architecture, and products from the ground up or enhancing existing solutions with the latest technologies. While a background in cybersecurity is advantageous, it is not mandatory. However, a strong understanding of secure web application development and architecture is essential. The ability to learn new processes and design system architecture from high-level requirements is crucial. A solid grasp of web applications, RESTful API architecture, and best practices, particularly regarding API security, is important.

Responsibilities and Duties

Enhance and Expand Our Web Application: Develop new functionalities, resolve issues, and optimize performance to ensure smooth interactions for our partners and customers with our incident response and sales/customer success teams. Advance Our Cybersecurity Tools: Enhance our Attack Surface Management tool, proactively safeguarding our clients against potential threats before they escalate into security incidents. Collaborate with Stakeholders: Provide strategic technical insights to business stakeholders, helping to shape our approach based on the complexities of technological challenges. Participate in Code Reviews: Engage in thorough peer code reviews to uphold high standards and share knowledge within the team. Lead Engineering Initiatives: Take charge of engineering projects or exploratory work to identify the most effective paths before implementation. Mentor junior engineers: Share knowledge and experience with less experienced developers through code reviews and mentoring to foster collective team growth. Deliver Robust Code Frequently: Write, test, and maintain code utilized by thousands of customers, ensuring high-quality, maintainable solutions are consistently delivered. Work Cross-Functionally: Collaborate closely with Product, Security Engineering, or Incident Response teams to determine the best strategies for implementing new features or enhancements.

Technical Qualifications and Experience

Professional Experience: A minimum of five years as a software engineer, ideally focusing on external customer products, excluding any years spent in study or purely on hobby projects. Developing mission-critical products: Proven experience in leading the development or significantly contributing to major products or tools used daily by customers or internal teams, critical to the organization's operations or primary revenue stream. Language Proficiency: Highly skilled in Ruby on Rails (used for our web application) and preferably also proficient in Python (used for our Attack Surface scanning tool and other backend systems like REST APIs), including performance optimization and building robust test suites. CI/CD Pipeline Experience: Experience with using and maintaining CI/CD pipeline infrastructure. Familiarity with minimal maintenance tasks, such as GitHub Actions, is a plus. Security engineering: (Optional) Experience with systems and tools commonly used in penetration testing and vulnerability detection (to support the development of our Attack Surface Management tool). Containerized Deployment and infrastructure: (Optional) Familiarity with at least one containerized deployment platform such as Google Cloud Run, Amazon ECS, Azure, or Kubernetes and Infrastructure-As-Code (Terraform). Educational Background: Bachelor's degree in a related field or a proven history of professional engineering in a team-based environment for at least five years.

Qualifications and Experience

Prioritize test-driven, elegant, maintainable solutions, supported by appropriate documentation, whether terse or detailed, as per the case. Natural curiosity and a passion for learning new concepts. Value balance in your life and recognize when to conclude your workday to return refreshed the next morning with innovative solutions. We do not endorse sloppy code and strive to prevent overworked, fatigued developers, but you must also be adept at managing your own time to achieve this. Enthusiasm for efficiency and collaboration, with a history of fostering strong relationships with your engineering peers. Comfortable presenting to a group over video calls periodically, explaining how a solution is developed and functions in layman's terms. Business fluent written and verbal communication skills in English. Conversational fluency and higher in multiple languages are a plus but not required.

What We Offer

40 days paid leave per year inclusive of public holidays, which may be taken at the discretion of the employee subject to compliance with our Leave Policy and the approval of their manager. Limited Work From Anywhere policy allotment, allowing for work from alternate locations contingent upon coverage provided by teammates and approved by manager for 20 days per quarter. Monday through Thursday are required to be in-office; no scheduled internal meetings on Fridays, unless absolutely necessary. Enrollment in the company's comprehensive corporate health plan that includes a large direct billing network for medical and dental coverage. Opportunities for inter-office travel, including a required annual week-long Tribe Onsite meet-up. $5000 USD/year for professional training budget contingent on approval from manager with a 12-month retention requirement. HK$706,500 - HK$706,500 a year Cash: The Salary is HKD $706,500 or SGD $122,400, depending on the country of employment. Equity: ESOP baseline award proportional to the annual compensation for a total of 20,250 options with a strike price set at current Fair Market Value, with a 5-year vesting period inclusive of a 1-year cliff. Declamation: Blackpanda is committed to building a culturally diverse company, and we value a broad set of opinions in our team. As we grow, we are looking to build a team with a range of viewpoints at its core, and we encourage applications from minority candidates and all genders however you identify (X/F/M). Blackpanda does not accept unsolicited resumes from recruitment agencies. We will not be responsible for any fees related to unsolicited candidates submitted by recruiters with whom we have not established explicit, written agreements for our job vacancies. By submitting any candidate information, recruiters agree to forfeit any claim to fees should their candidate be hired without an established agreement with Blackpanda.

---