Senior Software Engineer, Alerting Platform

About Command|Link

Command|Link is a global SaaS Platform providing network, voice services, and IT security solutions, helping corporations consolidate their core infrastructure into a single vendor and layering on a proprietary single pane of glass platform. Command|Link has revolutionized the IT industry by tackling the problems our competitors create. In recognition for our unprecedented innovation and dedication, Command|Link was recognized as the SD-WAN Product of the Year, ITSM Visionary Spotlight, UCaaS Product of the Year, NaaS Product of the Year, Supplier of the Year, and the AT&T Strategic Growth Partner. Command|Link has built the only IT platform for scale that solves ISP vendor sprawl and IT headaches. We make it easy for our customers to get more done, maximize uptime and improve the bottom line.

Learn more about us here!

This is a 100% remote position

About your new role:

Command|Alert is CommandLink 's signal-processing core: the engine that turns raw security, monitoring, and customer-defined telemetry into alerts customers actually trust. Alert fatigue and noise are the top complaint across every competitor in this space, and this role exists to make sure our alerts are the ones people don't tune out.

As a Senior Software Engineer on Command|Alert, you'll own large components of the correlation and alerting engine end to end, from rule evaluation and anomaly detection through delivery and downstream notification. You'll design solutions for the team's hardest reliability and correlation problems, coordinate with other engineers to get them shipped, and take on independent projects that push the product forward, all while teaching and mentoring the engineers around you.

Key Responsibilities:

- Design and own solutions for how Command|Alert evaluates rule-based thresholds, ML anomaly scores, and correlation logic to produce high-fidelity alerts, for both platform-defined and customer-defined alerts.

- Own the reliability of major pieces of the alerting pipeline, from OpenSearch alert evaluation through Kafka delivery via OpenSearch callbacks to downstream notification, including idempotency guarantees and soak-tested behavior under sustained load.

- Help turn diverse telemetry sources, security tooling, monitoring data, syslog, OpenTelemetry, and L2-L4 network protocols, into usable network and system topologies and their dependencies, and make that context usable for LLM reasoning over investigations and remediation.

- Contribute to the technical groundwork for generating alert definitions from the normalized data model using LLMs.

- Act as a primary driver on resolving production issues in your area, running post-mortems and owning the long-term fixes that come out of them.

- Take on independent, greenfield projects that push Command|Alert's correlation and detection capability forward.

- Help decide when to spike, prototype, or build an MVP, and rally the team around the plan.

- Actively teach and mentor engineers on your team, and share knowledge that raises the whole team's effectiveness.

- Instigate design discussions and represent Command|Alert's technical direction in cross-team conversations.

- Takes on additional responsibilities and projects as needed to support the success of the team and organization.

What you'll need for success:

Required

- Experience designing, building, or operating high-reliability alerting or notification systems in production, including running rule-based and ML-based detection logic against real traffic at scale.

- Strong Kafka experience, particularly producing and consuming event streams for downstream delivery.

- A working command of telemetry and protocol data: security tooling output, monitoring telemetry, syslog, OpenTelemetry, NetFlow or sFlow, SNMP, ICMP, and firewall logs, with the ability to turn that data into real network and system topologies and dependency maps.

- A track record building or operating systems where webhook reli