Senior Backend & AI Engineer - Cyber Engineering Stoïk

About Stoïk

Stoïk protects European SMEs and mid-sized companies against cyber risk. Founded in 2021, Stoïk is a cyber insurer that combines cyber insurance with our own security tools, managed services and an in-house incident response team (CERT), so we support companies before, during and after an attack. Our CERT sees first-hand which attacks cost companies money, and that shapes the prevention we build.

Our ambition: become the CISO of Europe.

• 15,000+ companies protected across 7 European markets

• 2,000+ broker partners

• 300+ incidents handled by our CERT every month

• 200+ people, backed by €70m+ from a16z, Alven and Munich Re

What you'll do

We’re hiring for two distinct positions: an engineer to extend our AI-powered workflows in Python, and an experienced endpoint engineer to build our Go agent.

1) IMS - Extending the tool to every run team (Python). Our Incident Management System already automates a large part of the CERT workload. We're now extending its scope to:

1. more complex incidents like full-scale ransomware, and

2. all our run teams (underwriting, CSM, sales call prep).

The key quality here is the ability to ramp up fast and to deploy agentic capabilities solving the issue: understand a new team's workflow, ship something useful, and iterate. For ransomware response for instance, that means working directly with incident responders to understand their workflows and forensic tasks. You’ll build the tools, agent orchestration, and evaluation framework, and own the system’s reliability and adoption across our ransomware cases.

2) Endpoint Agent - Software inventory and risk detection (Go). You'll build an endpoint agent, in Go, that collects the software deployed on a machine and flags potential risks. This is a hard and critical problem: footprint, reliability, cross-platform behavior, and running quietly on someone else's production machines. Because of that, we're looking for someone with a strong previous experience in endpoint agent deployment and architecture.

We are iterating quite fast and have new projects frequently. So if your profile matches what's below, but you're interested in another tool we've built, please reach out anyway.

Why build here

AI impacts us in two ways: (1) cyber risk is changing very fast on the attack side; and (2) many cyber problems that used to be super hard are now within reach. This makes it very interesting to build here:

1. We are one of the only players in the world with a clear view on how cyber risk is changing. We literally reimburse clients for the financial consequences of attacks, so we know very well what types of attack cost money, what the trends are, and how hackers are updating their operations. We are able to cut through the noise and assess which products are worth building to reduce cyber risk efficiently. The noise is increasing as the innovation pace goes through the roof, so this is becoming one of our most precious assets.

2. We have skin in the game and a perfect alignment of interests with our clients. If our prevention tools don't work, we pay more, because we insure our clients. That forces us to hold very high standards about what we build and the team building it. And to keep up with frontier cyber capabilities.

3. Many problems have become simpler (but not simple!) because of AI. Think for instance of edge cases in detection that were very time-consuming but can now be handled decently well with well-set-up agents. We have no attachment to any single product, because we aim at solving cyber risk as a whole. If tomorrow one of our products becomes irrelevant because cyber risk has changed, we will drop it. On the contrary, that means we are currently super ambitious about what we can build, because we can help our clients in a coherent way.

As of now, we have built:

• Tools to monitor vulnerabilities and misconfigurations in the IT system (EASM tool, phishing campaigns, AD scan, cloud scans).

• Managed Services both on endpoints (the endpoint agent being a 3rd-party solution like CrowdStrike or SentinelOne) and on emails (fraud detection, mailbox compromise).

• An Incident Management System (IMS) to automate a significant part of the CERT workload (forensics, communications, action plans).

This is quite balanced. Some of those require handling scale (Email Security processes 10m+ emails/day), others crafting smart workflows (IMS is about agent orchestration, testing them and making sure they are reliable on a critical task).

What we're looking for

• Strong engineering profile. Very smart, lots of agency, sense of urgency. Based in Paris.

• You keep up with innovation and ruthlessly update your way of working. You're looking for a fast-paced and ambitious environment where you can grow and take ownership.

• Previous senior+ backend experience. Notably you have 4+ years of experience running a production environment and handling speed-vs-reliability trade-offs.

• Decent knowledge of cyber, or very curious about it.

• Stack:

  • Go / Python (strong in at least one)

  • PostgreSQL

  • AWS / Terraform / K8s

What we offer

Competitive salary set to reflect the impact you'll have. We discuss salary and equity during the first screening call, before any technical assessment.

Hiring process

1. Screening call - 30mn

2. Technical test - take home + 2h on-site debrief and live test

3. Fit round - 2h on-site with founders and future colleagues