Staff Engineer- Network Security & Attack Path Intelligence

Most boards and executives are currently flying blind when it comes to cyber risk. They are guessing. At Safe, weve built an AI-driven engine that finally gives the C-Suite a clear, quantified, and real-time view of their security posture. We dont just provide data; we provide certainty. We are a $170M Series C-funded category leader. We dont play in the mid-market; we operate at the highest levels of global enterprise. Today, we are proud to serve 10% of the Fortune 500, protecting global icons such as Apple, Netflix, AT&T, Verizon, and Victorias Secret. As we scale toward our next chapter, we are looking for high-performers who want to do the best work of their careers at the intersection of AI and Cybersecurity. The Culture Memo: Our Operating System Safe is not a typical corporate environment. We are a high-intensity, mission-driven team. We value builders who want to define a category and work alongside people who are equally committed to excellence. Extreme Ownership: We dont do "not my job." We hire people who see a gap and own the solution from start to finish. The Elite Standard: We serve the most sophisticated companies on the planet. Our work must be bulletproof. Whether its a line of code or a sales deck, we aim for Tier-1 quality every time. Methodology & Rigor: We dont wing it. From Force Management and MEDDICC in sales to data-driven sprints in engineering, we rely on proven frameworks to stay disciplined and predictable. Radical Candor: We move too fast for politics or sugar-coating. We value direct, honest feedback that helps us find the right answer quickly. The Series C Hustle: We have the stability of a well-funded leader but the heart of a startup. The Perks & Ownership: We want our team to feel like owners because they are owners. We trust our people to manage their results and their time. Meaningful Equity: Every "Safestar" is a shareholder. You arent just an employee; you are a partner in our success. Unlimited Leaves: We dont believe in clock-watching. We offer unlimited leave because we trust you to take the time you need to recharge while staying committed to the mission. Comprehensive Benefits: We provide top-tier medical insurance and wellness benefits to ensure you and your family are well cared for. Career Trajectory: We are growing aggressively. For high-performers, the path for advancement moves at the speed of your ambition. As a Staff Engineer Network Security & Attack Path Intelligence, you will define and lead the technical direction of Safes network reachability and attack-path intelligence capabilities across on-premises, cloud, and hybrid environments. You will be the hands-on architect behind systems that connect network topology, identities, vulnerabilities, security controls, and business-critical assets to determine how attackers can move through an enterprise environment. Youll collaborate with product, backend, graph, data, AI, and platform teams to build scalable, explainable, and enterprise-ready attack-path capabilities. This is a high-impact, hands-on technical leadership role. You will architect systems, build prototypes, write production-quality code, and help shape how Safes CTEM platform identifies and breaks the attack paths that pose the greatest business risk. Core Responsibilities: Architect Safes Attack Path Intelligence: Define the architecture and data model for network topology, effective reachability, trust boundaries, identities, vulnerabilities, controls, and attack paths across complex enterprise environments. Build Core Attack Path Capabilities: Write production-quality code for network configuration parsing, reachability analysis, attack-graph construction, graph traversal, exposure chaining, and blast-radius computation. Build prototypes and evolve them into reliable, enterprise-scale services. Model Effective Network Reachability: Derive actual connectivity from routing tables, VLANs, ACLs, firewalls, NAT, VPNs, proxies, load balancers, and segmentation policies rather than relying only on documented topology. Model Attacker Movement: Build reasoning systems that connect exposed services, vulnerabilities, credentials, Active Directory privileges, lateral movement, privilege escalation, and access to critical assets. Prioritize Actionable Attack Paths: Distinguish theoretical paths from reachable, exploitable, and business-critical attack paths. Incorporate exploitability, control effectiveness, asset criticality, and business impact into prioritization. Enterprise Security Integrations: Design integrations with firewalls, routers, NAC, EDR, CMDB, Active Directory, vulnerability scanners, NetFlow, cloud platforms, and other enterprise .