Technical Lead, Core Web & API Architecture

About Us

A Note on Our Next Chapter

You may have seen the recent news: Accenture has announced its intent to acquire NetRise and runZero, alongside a majority investment in Dragos, bringing the combined business value to $4.175B. Following regulatory sign-off (expected August or September 2026), NetRise will be integrated inside of Dragos, which will continue to operate as a standalone, independent cybersecurity company.

What this means for you: Our co-founders, Thomas Pace and Michael Scott, are staying on to join the Dragos leadership structure, and our immediate product roadmap remains unchanged. We are actively expanding the team to meet this market moment. Joining us right now means you will own our core user-facing surface today and have the unique opportunity to scale our technology into the most complete end-to-end xOT security platform in history.

Who We Are

NetRise is revolutionizing software supply chain security. Our platform empowers organizations to secure their digital ecosystems with unprecedented depth and efficiency, transforming how businesses understand, prioritize, and mitigate risks in today's complex digital landscape.

We don't just scratch the surface; we provide deep visibility into the software and firmware running the world's most critical infrastructure, medical devices, automotive systems, and enterprise software. We achieve this through our core proprietary technologies:

• Turbine: Our high-performance, automated ingestion and analysis engine that continuously deconstructs complex binaries and software packages at scale.
• Provenance: Our advanced tracking and attribution capabilities that map the exact lineage and origin of open-source and third-party software components, ensuring authenticity and compliance.
• ZeroLens: Our cutting-edge, crystal-clear risk visualization interface that translates massive, complex security data into real-time, actionable intelligence for defenders.

The Opportunity

We're hiring a Lead Software Engineer to own the surface where NetRise meets its users and integrators — the web application, the GraphQL and gRPC APIs behind it, and the multi-language SDKs our customers build on.

You'll set the technical direction for how that surface is designed, versioned, and evolved — and you'll write the code that proves it out. This is a hands-on lead role: you'll architect, you'll ship, and you'll raise the bar for the engineers working alongside you.

Expect hard problems. Real-time security data at scale. Schema evolution that can't break the integrators depending on it. A frontend that has to make dense binary-analysis output legible to a security team under pressure. You'll have an outsized impact on the product and our team's trajectory as we scale into this next phase.

Major Responsibilities

• Own the frontend and API surface end to end — from requirement analysis and scoping through design, execution, and deployment.
• Set technical direction for API design, versioning, and schema evolution. Govern the GraphQL schema and the protobuf/gRPC contracts so they evolve without breaking consumers.
• Build and maintain client SDKs across multiple languages. Own the codegen pipelines, semantic versioning, and release automation that keep them in sync as the API changes.
• Partner with product management on the technical roadmap, and with the backend team (primarily Go services) on the contracts that connect them.
• Raise the bar on frontend architecture, performance, accessibility, and observability. Set standards for code review and mentor the engineers you work with.
• Ensure performance, scalability, and security across the web and API surfaces while maintaining a high developer experience.

Requirements

Required

• 6+ years building production web applications and the APIs behind them, including time leading technically (tech lead, lead engineer, or equivalent scope).
• React (hooks, Context, lazy loading, large component architectures).
• GraphQL — both client (Apollo Client) and server (Apollo Server) side.
• TypeScript / Node.js.
• gRPC + Protocol Buffers (client consumption at minimum; ideally service design).
• API design, versioning strategy, and schema evolution.
• Build and maintain client SDKs across multiple languages (e.g., Python, TypeScript, Go) — codegen pipelines, semantic versioning, release automation, and keeping libraries in sync as the schema evolves.
• MUI or similar component library experience.
• Auth0 / OAuth 2.0 / JWT flows.

Strongly Preferred

• Go (the backend services you'll collaborate with daily).
• PostgreSQL (query patterns and data modeling).
• GCP (Cloud Run, GCS, etc.).
• OpenTelemetry / observability.
• Data-heavy UIs (grids, charts, virtualization).
• CI/CD with GitLab.
• Protobuf schema design / buf tooling.

Nice-to-Have

• Feature flag systems (OpenFeature).
• Terraform.
• Cybersecurity / SBOM domain knowledge (CycloneDX, SPDX, CVE).