The posting
Are you looking to build tools that engineers actually keep in their workflow? Do you get excited about AI agents that fix real vulnerabilities instead of writing confident nonsense about them? Are you willing to tolerate ridiculous bird puns? If you said yes to at least two of those, keep reading.
The Role
On Denver
What You’ll Do
- Design and build the find, fix, and verify loop that powers our agentic security workflows
- Build and own the tool layer coding agents use to reach our platform. Some of this exists and needs a rewrite. You will have a strong opinion about how, and the room to act on it
- Extend our published agent skills, which are open source and in use today
- Do the context engineering work that makes the difference between a useful agent and a plausible one. Decide what the model sees, in what shape, and at what point in the loop
- Build eval harnesses for non-deterministic systems. Define what "better" means, measure it repeatably, and defend the number
- Build core product features and supporting services in a microservices architecture using Kotlin, Java, Rust, gRPC, Postgres, Docker, Kubernetes, and Gradle
- Design and build APIs for both our UI and our customers
- Build developer-facing command line tooling
- Integrate with the platforms engineers already live in: GitHub, GitLab, CI systems, IDEs, and agent runtimes
- Work directly with product, security, and go to market. We are small enough that you will hear customer feedback firsthand and ship against it
- Learn more about vulnerability classes than you expected to, and get very good at explaining Remote OS Command Injection at parties
About You
- 6+ years building and shipping production SaaS software
- Deep in at least one statically typed language. Python, TypeScript, Go, or Rust experience is where our agent tooling and CLI live, so that helps immediately
- Our core platform is Kotlin and Java. We do not require you to have written either. If you are strong somewhere else, you will be productive in our codebase inside a month and we are fine with that math
- Experience with microservices in a modern cloud environment, containers, and container orchestration
- Solid API design instincts and the tooling that goes with it
- Obsessive about automation and automated testing
- You have built something with an agent loop, not just called an LLM API. Tool calling, multi step execution, retries, failure handling, knowing when to stop
- You have written evals for non-deterministic output. You can talk about what you measured, why that metric was the right one, and what it missed
- You have done real context engineering. You know that most agent failures are context failures, and you have the debugging stories to prove it
- Bonus: you have built or published MCP servers, agent skills, or custom agent integrations
- Accountable. You own outcomes, not just tickets. When something you shipped breaks, you are already looking at it
- Persuasive. You bring people to your position with logic and data, not volume
- Self motivated. You do not need to be told what matters twice
- Focused. You finish things before starting new things
- Collaborative. You know security is a supporting function of a business, and you know the difference between binary security and security at scale
How We’ll Evaluate
The Goods
- Competitive compensation. Salary plus a real equity stake in what we are building
- Solid benefits. Health, dental, and vision 100% covered for employees and dependents. Life insurance, AD&D, and 401k
- Time to recharge. Take what you need, plus ten paid holidays
- A great setup. Home office equipment, good tools, and a team that is fun to build with
- Work that matters. StackHawk is seven years old with real customers and real revenue. The agentic product is two months old. You get the stability of the first and the blank page of the second, which is a rare combination. The decisions you make in the next few months will still be in the codebase in three years
StackHawk is proud to be an equal opportunity employer. We are committed to equal opportunity regardless of race, color, ancestry, religion, gender, gender identity, genetic information, parental or pregnancy status, national origin, sexual orientation, age, citizenship, marital status, disability, or Veteran status.



