Stack Builders is looking for a Senior Python Developer Contractor to build a production-grade autonomous cybersecurity platform from an AI-generated prototype. In this senior-level role, you will collaborate directly with the client's security product lead in an agile, highly technical environment focused on automation, data engineering, and AI-augmented development.
What You'll Do
- Productize and extend a Python-based Security Automation Platform that replaces L1/L2 SOC operations.
- Develop integrations with threat intelligence services like VirusTotal and Abuse.ch.
- Design and improve a multi-process automation architecture and a YAML-based workflow engine.
- Be deeply involved in all engineering aspects, from clarifying logic to building scalable pipelines and automated response systems.
- Ensure all development is AI-first, with AI generating 60–70% of the first-draft code.
What We're Looking For
- High proficiency in Python 3.10+ and experience building large, production-grade backend systems.
- Experience with data ingestion pipelines, REST APIs, event/log processing, or message queues.
- Hands-on experience with Elasticsearch / Kibana or similar search/analytics platforms.
- Comfortable working with MongoDB and ideally experience with MongoEngine or another ODM.
- Understanding of SOC, SIEM, SOAR, EDR, or incident response tooling.
- Ability to integrate with third-party APIs and manage auth, throttling, error handling, retries, and async patterns.
- Experience working in or extending a large existing codebase of around 50K lines.
- Familiarity with workflow or orchestration engines, custom or within the Python ecosystem.
- Comfortable using AI coding tools (Claude Code, Copilot, Cursor, ChatGPT) as part of your daily workflow.
- Ability to direct AI with clear prompting, refine its output, and detect subtle correctness or security issues.
- Advanced professional spoken and written English skills, with clear, organized, and assertive communication.
- Can work a minimum of 4 hours overlapping with US Eastern timezone for real-time client collaboration.
- Enjoy working in a small, senior, high-ownership team and are eager to learn, grow, and have fun.
Nice to Have
- Knowledge of threat intel APIs such as VirusTotal, Abuse.ch, MISP, and OTX.
- Familiarity with Windows event logs or endpoint telemetry.
- Experience with Go (favored for long-term scalability).
- Exposure to React/Next.js (a plus for future UI integration).
Technical Stack
- Python 3.10+
- Elasticsearch/Kibana
- MongoDB/MongoEngine
- REST APIs
- YAML-based workflow engine
Team & Environment
You'll be part of a small, senior, high-ownership team, collaborating directly with the client's security product lead.
Benefits & Compensation
- 100% remote and flexible modality.
- A human-centered experience in a people-first company.
- Challenging, full-time, and long-term projects with globally admired companies.
- A strong learning culture with regular pairing sessions to build high-quality code while sharing knowledge.
- Opportunities for conference participation, OSS contributions, tutorials, blog posts, and technical talks.
- Exceptionally talented and passionate coworkers.
- Timely payments, with flexibility to choose your payment date modality.
- A supportive Stack Builders community to grow with you.
Work Mode
This is a 100% remote contractor position open to candidates based in Brazil, Argentina, or Colombia.
Stack Builders is proud to be an equal-opportunity employer committed to creating a safe and inclusive work environment.
