Sr Full-Stack AI Security Engineer

We are CirrusLabs. Our vision is to become the world's most sought-after niche digital transformation company that helps customers realize value through innovation. Our mission is to co-create success with our customers, partners and community. Our goal is to enable employees to dream, grow and make things happen. We are committed to excellence. We are a dependable partner organization that delivers on commitments. We strive to maintain integrity with our employees and customers. Every action we take is driven by value. The core of who we are is through our well-knit teams and employees. You are the core of a values driven organization.

You have an entrepreneurial spirit. You enjoy working as a part of well-knit teams. You value the team over the individual. You welcome diversity at work and within the greater community. You aren't afraid to take risks. You appreciate a growth path with your leadership team that journeys how you can grow inside and outside of the organization. You thrive upon continuing education programs that your company sponsors to strengthen your skills and for you to become a thought leader ahead of the industry curve.

You are excited about creating change because your skills can help the greater good of every customer, industry and community. We are hiring a talented <Job Title>to join our team. If you're excited to be part of a winning team, CirrusLabs
(http://www.cirruslabs.io) is a great place to grow your career.

Overview
Seeking a Senior Full-Stack AI Security Engineer to develop and integrate a new External Attack Surface Management (EASM) application into our existing platform. This app will provide AI-driven domain scanning, dark web monitoring, and automated reporting, while seamlessly integrating with Salesforce, HubSpot, ConnectWise, and data architecture.

This role will be responsible for building the application in an extensible, modular way that ensures seamless integration with platform, allowing future expansion and interoperability with existing features. Additionally, this role requires evaluating current capabilities, APIs, and integrations to determine the most effective approach for development.

Responsibilities
• Evaluate existing data architecture, APIs, and platform integrations to determine opportunities for reusability and extension.
• Design and develop an extensible EASM solution using React, Node.js, and Python, ensuring modular architecture for future expansion.
• Build scalable API endpoints to integrate the EASM solution with platform and external services like Shodan, Have I Been Pwned, and VirusTotal.
• Develop AI-driven security insights, leveraging LLMs and ML models to detect cyber risks and provide contextual recommendations.
• Create in-app dashboards and exportable reports (PDF, CSV, API-based) to help MSPs provide security assessments to customers.
• Ensure seamless integrations with CRMs like Salesforce, HubSpot, and ConnectWise, allowing MSPs to track risk data in their workflows.
• Optimize for security, performance, and scalability, ensuring the solution meets enterprise-grade security standards.
• Collaborate closely with engineering team to align the EASM app with platform roadmap and integration strategy.

Requirements
• 5+ years of experience in full-stack development with React, Node.js, and Python.
• Expertise in cybersecurity intelligence APIs like Shodan, Have I Been Pwned, and VirusTotal.
• Experience with AI/ML models (e.g., TensorFlow, PyTorch, OpenAI APIs) for security risk detection.
• Strong understanding of modular, API-first architectures to enable extensibility and seamless platform integration.
• Proven ability to build scalable web applications and real-time data processing systems.
• Strong experience in developing interactive dashboards and automated reporting exports (PDF, CSV, API-based reports).
• Hands-on experience integrating with CRMs like Salesforce, HubSpot, and ConnectWise.
• Familiarity with database management (PostgreSQL, MongoDB, Firebase).
• Strong knowledge of network security, OSINT, and cybersecurity frameworks.
• Experience evaluating build vs. integrate strategies for leveraging current capabilities vs. external APIs.
• Ability to document and develop SDKs or extensible APIs that allow third-party integrations in the future.
• Ability to work in a fast-paced startup environment with rapid development cycles.

Preferred Qualifications
• Experience with serverless architectures (AWS Lambda, Firebase Functions).
• Familiarity with GraphQL, WebSockets, and real-time data analytics.
• Prior work in MSP or cybersecurity software development.