Senior Backend & AI Engineer (Cyber-Engineering) at Stoïk in Paris

Job description

About Stoïk Stoïk protects European SMEs and mid-sized companies against cyber risk. Founded in 2021, Stoïk is a cyber insurer that combines cyber insurance with our own security tools, managed services and an in-house incident response team (CERT), so we support companies before, during and after an attack. Our CERT sees first-hand which attacks cost companies money, and that shapes the prevention we build. Our ambition: become the CISO of Europe. 15,000+ companies protected across 7 European markets 2,000+ broker partners 300+ incidents handled by our CERT every month 200+ people, backed by €70m+ from a16z, Alven and Munich Re What you'll do We’re hiring for two distinct positions: an engineer to extend our AI-powered workflows in Python, and an experienced endpoint engineer to build our Go agent. 1) IMS - Extending the tool to every run team (Python). Our Incident Management System already automates a large part of the CERT workload. We're now extending its scope to: more complex incidents like full-scale ransomware, and all our run teams (underwriting, CSM, sales call prep). The key quality here is the ability to ramp up fast and to deploy agentic capabilities solving the issue: understand a new team's workflow, ship something useful, and iterate. For ransomware response for instance, that means working directly with incident responders to understand their workflows and forensic tasks. You’ll build the tools, agent orchestration, and evaluation framework, and own the system’s reliability and adoption across our ransomware cases. 2) Endpoint Agent - Software inventory and risk detection (Go). You'll build an endpoint agent, in Go, that collects the software deployed on a machine and flags potential risks. This is a hard and critical problem: footprint, reliability, cross-platform behavior, and running quietly on someone else's production machines. Because of that, we're looking for someone with a strong previous experience in endpoint agent deployment and architecture. We are iterating quite fast and have new projects frequently. So if your profile matches what's below, but you're interested in another tool we've built, please reach out anyway. Why build here AI impacts us in two ways: (1) cyber risk is changing very fast on the attack side; and (2) many cyber problems that used to be super hard are now within reach. This makes it very interesting to build here: We are one of the only players in the world with a clear view on how cyber risk is changing. We literally reimburse clients for the financial consequences of attacks, so we know very well what types of attack cost money, what the trends are, and how hackers are updating their operations. We are able to cut through the noise and assess which products are worth building to reduce cyber risk efficiently . The noise is increasing as the innovation pace goes through the roof, so this is becoming one of our most precious assets. We have skin in the game and a perfect alignment of interests with our clients . If our prevention tools don't work, we pay more, because we insure our clients. That forces us to hold very high standards about what we build and the team building it. And to keep up with frontier cyber capabilities. Many problems have become simpler (but not simple!) because of AI. Think for instance of edge cases in detection that were very time-consuming but can now be handled decently well with well-set-up agents. We have no attachment to any single product, because we aim at solving cyber risk as a whole. If tomorrow one of our products becomes irrelevant because cyber risk has changed, we will drop it. On the contrary, that means we are currently super ambitious about what we can build, because we can help our clients in a coherent way . As of now, we have built: Tools to monitor vulnerabilities and misconfigurations in the IT system (EASM tool, phishing campaigns, AD scan, cloud scans). Managed Services both on endpoints (the endpoint agent being a 3rd-party s