Picus validates attack surfaces, exposures, and security controls as one continuous loop: validate, decide, fix, re-validate. Instead of ranking findings by severity score, Picus proves which exposures are genuinely exploitable in your environment, including the business-critical, restricted, and air-gapped assets a live exploit can never safely touch, so teams act on what truly matters and resolve each exposure into a clear call to patch, mitigate, monitor, or accept with evidence.
The Picus Platform spans Autonomous Penetration Testing, Exposure Validation, and Breach and Attack Simulation, unified by Picus Swarm, a swarm of AI agents that runs the whole validation loop continuously. It reaches across on-prem, hybrid cloud, and endpoint environments, with 75+ integrations that ingest from scanners like Tenable and Wiz and operationalize through your EDR, SIEM, firewall, and ticketing tools.
The pioneer of Breach and Attack Simulation, Picus proves and improves the security controls you already own, doubling control effectiveness within three months. Picus holds a 95% recommendation rate, 4.9 on G2, and 4.8 on Gartner Peer Insights, and is the #1 Leader on Frost Radar for Automated Security Validation.
About the Role
We are looking for a passionate Software Engineer as part of our Engineering team that builds Picus’s innovative cybersecurity product that works in both cloud and on-prem environments. Your priority will be the Windows side, but you'll share responsibility for every part of the product with the team. You can work from wherever you do your best work, on a team where AI agents are part of how we design, write, review, and ship code every day.
Why This Role
- Fully remote: You're part of a distributed team that works across locations and time zones.
- AI-native engineering: We develop with AI agents in the loop, using an AI-native development framework we built ourselves and keep improving. You'll use it daily and help shape it,
- Real Windows & .NET work: You'll work at the OS level with services, processes, the registry, permissions and Windows security features,
- The whole product, not just one part: Beyond Windows, you can contribute anywhere in Picus's core product, including backend services, the Linux and macOS agents, and our AWS-native, event-driven attack simulation,
- Global exposure: You'll ship a product used by organizations around the world, working with colleagues and customers from many countries.
- Design, build, and maintain a Windows agent in C# and .NET,
- Build endpoints with Go, event-driven communication, REST, PostgreSQL, New Relic, SonarQube,
- Work hands-on with Windows internals: services, processes, registry, permissions, inter-process communication, and security features,
- Work with AI agents as everyday teammates, and help improve our AI-native framework's workflows, tooling and standards,
- Own features end to end, from design and implementation through testing, release and monitoring,
- Collaborate with product, UX, and fellow engineers in a self-organizing agile team, and share what you learn.
- 3+ years of professional software development experience, mostly in C# and .NET Solid understanding of the Windows OS: services, processes, registry, and permissions,
- Willingness to work outside Windows, on backend services and other platforms,
- Daily use of AI coding assistants or agents, and good judgment about when to trust, verify, or rewrite their output,
- Strong fundamentals in software design, data structures, algorithms, network technologies, and unit testing,
- Humble, friendly, adaptive, result-oriented personality,
- Clear written and spoken communication in English,
- BS or MS degree in Computer Science, Engineering, or a related field.
Skills Required
- 3+ years of professional software development experience, primarily with C# and .NET
- Strong understanding of Windows services, processes, registry, and permissions
- Willingness to work on backend services and platforms outside Windows
- Daily use of AI coding assistants or agents, with sound judgment in evaluating their output
- Strong fundamentals in software design, data structures, algorithms, network technologies, and unit testing
- Clear written and spoken English communication skills
- BS or MS degree in Computer Science, Engineering, or a related field
What We Do
Picus Security is the pioneer of Breach and Attack Simulation (BAS). The Picus Complete Security Control Validation Platform is trusted by leading organizations worldwide to continuously validate the effectiveness of security controls against cyber-attacks and supply actionable mitigation insights to optimize them. Picus has offices in North America, Europe and APAC and is supported by a global network of channel and alliance partners. The company is dedicated to helping security professionals become more threat-centric and via its Purple Academy offers free online training to share the latest offensive and defensive cybersecurity strategies. Find more here: https://www.picussecurity.com/
