Backend engineer - Indigo Platform
LevelBlue/Cybereason · Tokyo, Japan MUST BE LOCATED IN JAPAN
At Level Blue/Cybereason, we are developing Indigo, our next-generation platform designed for high-throughput ingestion, processing, and real-time analysis of EDR, XDR, and MDR telemetry. The system is architected to handle millions of concurrent security events per second, requiring high-concurrency backend services written primarily in Rust, deployed across low-latency distributed infrastructure.
We are looking for a Full-Stack Engineer with a strong backend focus to own core components of the Indigo platform, optimizing for data integrity, low latency, and system reliability at scale.
Key Responsibilities
- System Architecture & Development: Design, implement, and maintain scalable backend services and supporting front-end interfaces for the Indigo platform.
- Data Ingestion & Processing: Build and optimize high-throughput data pipelines capable of ingesting and parsing large volumes of real-time security logs and metrics.
- Performance Optimization: Continuously profile, benchmark, and optimize distributed services to maintain minimal processing latency under heavy workloads.
- API & Integration Engineering: Design and implement resilient, secure APIs to interface with various enterprise IT and cybersecurity tools.
- Security & Compliance: Ensure all platform components adhere to strict security standards, incorporating robust encryption, token-based authentication (OAuth 2.0), and data protection protocols.
Technical Qualifications
Required Experience
- Professional Experience: 5+ years of full-stack or backend-heavy development experience building distributed, high-throughput systems.
- Core Languages: Strong proficiency in Rust is required. Familiarity with Go, Java, or C++ is highly valued.
- Data Pipelines & Streaming: Hands-on experience with Apache Kafka, the ELK stack, and distributed data processing frameworks (e.g., Flink, Spark, Redis).
- Infrastructure & Cloud: Proven experience with cloud-native environments, microservices architectures, and containerization (Docker, Kubernetes).
- Databases: Strong understanding of SQL and NoSQL databases, including optimization for high-write, data-heavy environments.
- Observability: Familiarity with telemetry routing and monitoring tools like Datadog and Vector.
Preferred Qualifications
- Familiarity with SIEM systems or the application of machine learning within data streams.
- Experience with time-series databases, data warehousing solutions, and GraphQL.
- Knowledge of Infrastructure as Code (IaC) tools and modern DevOps/SRE practices.
#LI-Remote
More About Cybereason:
Our culture and how we operate reflects in our shared values. Our #Defenders are individuals with diverse skill sets and backgrounds who are driven to innovate and scale with our growing organization. We are a team that strives to learn from each other, solve challenging problems, and work collaboratively toward our goal of reversing the adversary advantage.
Core Values:
- Win As One: The power of an individual is less than the power of a team.
- Ever Evolving: Change keeps us at the forefront, so we encourage it.
- Daring: To achieve the impossible, we must dare to be different.
- Obsessed with Customers: We believe gaining our customers’ trust is the most important part of what we do.
- Never Give Up: We are tenacious and resilient, and we never stop.
- UbU: We believe people can only unlock their full potential when they work somewhere that accepts who they are.
If these values resonate with you and our vision excites you, join us today and help us end cyber attacks from the endpoint to everywhere! #Defenders
Don’t meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. At Cybereason we are dedicated to building a diverse, inclusive, and authentic workplace (#uBu), so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.
Skills Required
- 5+ years full-stack or backend-heavy development building distributed, high-throughput systems
- Strong proficiency in Rust
- Hands-on experience with Apache Kafka
- Hands-on experience with the ELK stack
- Experience with distributed data processing frameworks (e.g., Flink, Spark) and Redis
- Experience with cloud-native environments and microservices architectures
- Containerization and orchestration (Docker, Kubernetes)
- Strong understanding of SQL and NoSQL databases and optimization for high-write workloads
- Familiarity with observability and telemetry tools (Datadog, Vector)
- Experience designing and implementing secure, resilient APIs and security best practices (OAuth 2.0)
- Familiarity with Go, Java, or C++
- Familiarity with SIEM systems or applying machine learning within data streams
- Experience with time-series databases, data warehousing solutions, and GraphQL
- Knowledge of Infrastructure as Code (IaC) tools and modern DevOps/SRE practices
Cybereason Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Cybereason and has not been reviewed or approved by Cybereason.
-
Flexible Benefits — Remote-work options, flexible PTO, and lifestyle/home‑office stipends indicate adaptability to different employee needs. Publicly available benefits descriptions consistently emphasize flexibility as part of the package.
-
Leave & Time Off Breadth — Paid parental leave and a flexible or unlimited PTO approach, along with a robust holiday calendar, point to generous time‑off provisions. Employer-verified PTO information supports that these practices are active, not just advertised.
-
Healthcare Strength — Health, dental, and vision coverage are prominently featured, with signals of generous employer-paid options in some markets. Wellbeing resources such as an EAP and mental-health support further strengthen the core offering.
Cybereason Insights
What We Do
Cybereason is the champion for today’s cyber defenders providing future-ready protection that unifies security from the endpoint, to the enterprise, to everywhere the battle moves. Our platform combines the industry’s top-rated detection and response, next-gen anti-virus, and proactive threat hunting to deliver context-rich analysis of every element of a malicious operation.
Why Work With Us
We take on each day knowing we are doing something that is worth our time, passion and brain power, and we believe that we can only solve some of the world’s most complex technology challenges by unlocking the full talents of everyone within our organization.
Gallery







