Senior Software Engineer

Company: The Citation Group
Apply for the Senior Software Engineer
Location: Wilmslow
Job Description:

Senior Software Engineer Role in Cyber Security SaaS Platform – Full Stack


Location: Remote (UK-based), with occasional in-person attendance required for company events


Type: Full-time Reports to: Technical Lead



About the Role


We’re a small, fast-moving engineering team building a cyber security SaaS platform that gives customers device scanning, vulnerability patching, cyber risk assessments, and incident reporting – all in one place.


We’re looking for a Senior Software Engineerto join as an individual contributor and work across the full stack, from day one.


We’re an AI-native engineering team. We expect you to use AI as a genuine part of how you design, build, test, and review software, and, just as importantly, to know when human judgment, input, and validation are essential. In a cyber security product, that judgment matters more than anywhere else.


This is a remote-first role. You will, however, be expected to attend occasional in-person events, such as hackathons, conferences, quarterly planning sessions and team get-togethers. These are a genuine part of how we build the team, not a box-ticking exercise, so a willingness to travel a few times a year matters.


This is not a role for someone who needs a lot of structure or supervision. We’re a small, supportive team, but we don’t have the bandwidth for extended hand-holding beyond a 4-week induction period. We need someone who can quickly understand our systems, ask the right questions early, and then get on with delivering – independently, and to a high standard.



What You’ll Do



  • Design, build, and ship features across our full stack – from the React/GraphQL frontend to the Django/Python backend.

  • Work directly with product and design to turn ambiguous requirements into working software.

  • Own features end-to-end: design, implementation, testing, deployment, and monitoring in production.

  • Contribute to architecture and technical decisions as a senior voice on a small team – your input matters here.

  • Integrate with third-party security and infrastructure providers via REST APIs.

  • Maintain and improve async processing pipelines (Celery, Redis, RabbitMQ) that power scanning and reporting workloads.

  • Help evolve our authentication/authorization layer (JWT, SSO) as we scale.

  • Write clean, well-tested, maintainable code, and review others’ code with the same bar.

  • Use AI throughout your engineering workflow, from exploring problems and generating code to reviewing, building and testing solutions, while bringing a critical eye to AI-generated output and taking full responsibility for everything you ship.

  • Contribute to and refine the AI agents, harnesses and automated workflows that improve how the team delivers.

  • Help define where AI accelerates our work and where human review is non-negotiable, particularly for security-sensitive code, authentication and data handling.

  • Assist with production support as needed.



What We’re Looking For


Technical experience:



  • 5+ years of professional software engineering experience, with genuine full-stack range.

  • Frontend: React, Node.js, GraphQL (ideally Apollo), and comfort with WebSockets/real-time data.

  • Backend: Python (Django preferred), PostgreSQL, and GraphQL API design (Graphene or similar).

  • Experience with async task queues (Celery + Redis/RabbitMQ or equivalent).

  • Solid understanding of REST API design and integration with third-party services.

  • Experience with JWT-based auth and SSO (OAuth2/SAML/OIDC).

  • Familiarity with containerized deployments on AWS (ECS or similar) and general AWS literacy.

  • Comfortable working with CI/CD pipelines and infrastructure-as-code concepts.

  • Demonstrable experience using AI as a core part of your day-to-day engineering workflow, not just as a code completion tool. You can speak concretely about how AI has changed the way you work.

  • Hands-on experience working with AI agents, harnesses or agentic workflows, with a clear understanding of what they can and cannot do reliably.

  • Sound judgement about when a task can be delegated to AI and when human input and validation are of the utmost importance. You treat that judgement as a core engineering skill.

  • You work with AI-generated output critically: you verify it, refine it, test it and own what ships.



Working style (equally important)



  • Demonstrated ability to work independently- you can pick up a loosely defined problem, scope it, and drive it to completion without close supervision.

  • Strong communicator who proactively flags blockers, risks, and decisions rather than waiting to be asked.

  • Comfortable operating with ambiguity in a small team where process is lightweight and priorities can shift.

  • A pragmatic, ownership-driven mindset – you care about the outcome, not just your ticket.

  • You hold AI-assisted work to the same standard as anything else you produce: no shipping unverified output, ever.

  • Prior experience in a startup, scale-up, or small-team environment is a strong plus.



Nice to have



  • Background in cyber security, vulnerability management, or compliance/risk tooling.

  • Experience with security scanning tools, patch management systems, or SIEM/reporting platforms.

  • Exposure to multi-tenant SaaS architecture.

  • Experience building AI agents, harnesses or automated workflows in a production context.

  • Awareness of AI-specific security risks, such as prompt injection, data leakage into models and supply chain risks in AI tooling.



What You’ll Get



  • A meaningful, high-ownership role on a small team where your work directly shapes the product.

  • Direct exposure to the full architecture – no silos, no red tape.

  • A supportive team culture, with structured onboarding to set you up for independent success.

  • Access to frontier AI tooling and a genuine mandate to shape how the team uses it.

  • Remote-first working, with travel and expenses covered for in-person events like hackathons, conferences and quarterly planning.

#J-18808-Ljbffr…

Posted: October 15th, 2026