Filigran

Filigran provides an open-source cybersecurity solutions including threat intelligence management and cyber risk management.

251-500 employees

Software Engineering

Private Company

Website LinkedIn Email Facebook Share Tweet

Software Engineering Information Technology Cyber Security Network Security

Remote-First Company

This company operates with a remote-first culture, allowing team members to work from anywhere.

Open Positions9

Location: France; Workplace: RemoteFull-TimeCybersecurity softwarePosted

Staff AppSec / Product Security Engineer

Advise the CISO on product security strategy across the XTM platform and lead its operational implementation in product teams.
Track security technical pains through to resolution and turn priorities into concrete actions.
Lead threat modeling and security reviews during feature refinements with Product Owners.
Review critical pull requests, deliver security fixes, and build shared secure-by-default components.
Drive secure SDLC and supply chain tooling in CI, including scanning, Renovate, Snyk, SBOMs, and signed releases.
Manage product vulnerability intake, coordinated disclosure, CVEs and advisories, remediation SLAs, and the product side of security incidents.
Mentor engineers through pairing, workshops, and continuous feedback, and grow a network of security champions.
Document security architecture decisions to support consistency across teams.
Leverage AI tools and methodologies to improve productivity and contribute AI capabilities to internal workflows.

GraphQLNode.jsPython+3 more

Showing 1 of 9 positions

Overview

Filigran is a cybersecurity company founded in 2022 that provides open-source tools for eXtended Threat Management (XTM). The company offers solutions for threat intelligence, breach and attack simulation, and cyber risk oversight. Filigran's product suite includes OpenCTI, a cyber threat intelligence platform; OpenAEV, an adversarial exposure validation platform; XTM One, an AI-native orchestration and automation layer; and OpenGRC for cyber risk management. Filigran also provides Software as a Service (SaaS) options, enterprise editions, professional support, and training. The company serves over 6,500 organizations globally, including public sector entities like the FBI and the European Commission, and corporations such as Airbus, Marriott, Rivian, Capgemini, Bouygues Telecom, EDF, and ASRG.

Culture

Filigran operates as a remote-first and global company with teams across Europe, North America, and APJ. The company emphasizes an asynchronous work environment. Filigran holds two annual in-person gatherings, consisting of one global company event and one team-specific event.

Technology Story

Filigran utilizes a technology stack that includes TypeScript for both frontend (React, Vite, TanStack Router) and backend (Node.js, Fastify, tRPC). Data is managed using PostgreSQL with a code-first schema and Drizzle. Infrastructure is built on Kubernetes, supporting both bare-metal and public cloud deployments, and employs Helm charts, Ansible, and CI/CD pipelines such as GitHub Actions. Observability is handled with OpenTelemetry for traces, metrics, and logs, alongside Prometheus and Grafana. The company also uses Python for scripting and tooling. Filigran emphasizes the use of AI-powered tools, LLMs, copilots, and automation across various roles. Familiarity with cybersecurity standards like STIX/TAXII, OCSF, and MITRE ATT&CK is noted.

Working Conditions

Filigran is a global company with remote-first work flexibility. Employees have the option to choose their equipment and receive additional support for remote work and development needs. The company provides paid volunteer days. There are two annual in-person gatherings, one company-wide and one team-specific.

Benefits and Perks

Competitive compensation
Equity options
Remote-first flexibility
25 days of Paid Time Off (PTO) baseline
Volunteer days
Choice of equipment with additional support for remote work and development

Tech Stack

mxmobileanalyticspaymentwidgetsserver

Similar Companies