Staff Software Engineer, Security Plaftorm

About Command|Link

Command|Link is a global SaaS Platform providing network, voice services, and IT security solutions, helping corporations consolidate their core infrastructure into a single vendor and layering on a proprietary single pane of glass platform. Command|Link has revolutionized the IT industry by tackling the problems our competitors create. In recognition for our unprecedented innovation and dedication, Command|Link was recognized as the SD-WAN Product of the Year, ITSM Visionary Spotlight, UCaaS Product of the Year, NaaS Product of the Year, Supplier of the Year, and the AT&T Strategic Growth Partner. Command|Link has built the only IT platform for scale that solves ISP vendor sprawl and IT headaches. We make it easy for our customers to get more done, maximize uptime and improve the bottom line.

Learn more about us here!

This is a 100% remote position

About your new role:

CommandLink 's security product turns raw security telemetry, from firewalls, endpoints, cloud audit trails, and more, into a picture an analyst can actually investigate. As a Staff Software Engineer, you'll own that surface end to end: the API and UI, the architecture behind them, and the data contracts that keep the teams feeding into it, alert, classification, and ingestion, aligned to a common standard.

This is full-stack work with a strong security-domain emphasis. You'll need to reason clearly across a wide range of data sources and turn that into topology and context an analyst can actually trust and act on.

Key Responsibilities:

- Own the architecture and long-term direction of the security product's API and UI, including how it consumes security telemetry and evolves as the platform grows.

- Define and enforce the data contracts between the security product and the alert, classification, and ingestion services it depends on.

- Integrate and present security telemetry across a wide range of sources (syslog, NetFlow, SNMP, firewall telemetry, OpenTelemetry, EDR, and MDR ingest) into a consistent model analysts can rely on.

- Make cloud environments and their audit trails a first-class part of the product, not an afterthought bolted on.

- Surface enriched entities, alerts, and topology in the shape security teams actually use when investigating an incident.

- Drive architectural decisions in ambiguous, cross-functional spaces where requirements are incomplete or competing, and see them through to durable outcomes.

- Set the technical patterns and standards other engineers on the team build against.

- Mentor engineers across the security product team and raise the bar for what production-grade, domain-aware work looks like at CommandLink .

- Takes on additional responsibilities and projects as needed to support the success of the team and organization.

What you'll need for success:

Required

- Production experience with high-volume, latency-sensitive infrastructure: distributed messaging/event streaming (e.g. Kafka) and search or indexing at scale (e.g. OpenSearch), or clear equivalents.

- Comfort with contract-driven development across teams, using schema/interface definitions like protobuf to keep multiple services honest to a shared contract.

- Broad working knowledge of security telemetry (e.g. syslog, NetFlow, SNMP, firewall telemetry, OpenTelemetry, EDR, and MDR ingest) and the judgment to reason about what those signals mean together, not just individually.

- Strong working knowledge of cloud environments and their audit trails.

- Demonstrated ability to derive usable network and system topology from diverse, sometimes messy data sources.

- A track record of owning architectural decisions in ambiguous, cross-functional spaces and driving them to durable outcomes, including influencing shared standards beyond your immediate team.

- Comfort operating with significant autonomy where requirements are incomplete or competing.

- Familiarity with security products like NDR, XDR, or similar. Understand