About us
Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. Founded in 2017, Coalition combines comprehensive insurance coverage and innovative cybersecurity tools to help businesses manage and mitigate potential cyberattacks.
Opportunities to make an impact with bold thinking are real—and happening daily at Coalition.
About the role
This role is a Principal-level individual contributor position embedded in the Security Engineering organization, focused on Wirespeed’s most complex detection and integration workflows. The Principal Software Engineer will own critical backend services and integrations end to end, from architecture and design through implementation, rollout, and ongoing quality. They will have broad autonomy to shape the technical direction of Wirespeed’s detection and enrichment stack and will serve as a technical multiplier for the broader engineering team.
Responsibilities
- Lead the design and implementation of core backend services and integrations that power Wirespeed’s detection and enrichment platform.
- Own high-impact integrations with key security tools (such as EDR, identity providers, and SIEMs) end to end, including reliability, performance, and long-term maintainability.
- Collaborate with detection engineering and security operations to translate detection strategies into robust, production-quality logic and pipelines.
- Set technical standards for code quality, testing, and observability, and drive consistent adoption through design and code reviews.
- Mentor and guide senior engineers, helping them navigate complex architectural decisions and develop scalable, secure solutions.
Skills and Qualifications
- Significant experience as a backend or platform engineer building distributed systems and cloud-based services in production.
- Strong proficiency with TypeScript/Node.js or a similar modern backend language and framework.
- Hands-on experience designing and maintaining integrations with third-party APIs or platforms; experience with security tools (EDR, identity, SIEM) is highly preferred.
- Solid understanding of security concepts and practices, with expertise in at least one of: endpoint detection and response, identity and access management, SIEM/log analytics, or detection engineering.
- Proven ability to design, deliver, and operate complex systems that handle high volumes of data, with strong reliability and observability.
- Demonstrated technical leadership, including influencing architecture, mentoring other engineers, and collaborating effectively across teams.
- Strong communication skills and a practical, outcome-oriented approach to problem solving.
- Experience in a cybersecurity, MDR, or related domain is a plus, but not strictly required if th