SubImage (YC W25) Is Hiring a Founding Engineer in SF

SubImage maps infrastructure the measurement an attacker does truthful information teams astatine scale-ups and enterprises tin find and hole problems. We’re built connected Cartography, the unfastened root instrumentality our founders helped create astatine Lyft that’s now a CNCF project, adopted astatine complete 70 companies.

We are a seed shape institution (a mighty squad of 4!) but are increasing quickly - our customers are companies and organizations that your parents person heard of. We request engineering thief to meet the demand! This is your chance to get successful connected the crushed level of thing big. Or astatine least, fig retired very quickly that this won’t activity (it’s startup life; conscionable being honorable astir it).

Novel engineering problems you’ll activity on

We’re seeking the beatified grail successful aggregate information challenges.

• Can we triage and contextualize information vulnerabilities? This problem goes deep:
  • Are the vulns connected internet-facing assets? Via which progressive services? What is the afloat path?
  • Are the susceptible functions genuinely reachable from a codification perspective?
  • Are location immoderate compensating controls astatine play that make the vuln invalid?
  • Once exploited, does the vuln assistance entree to delicate data? Via what providers, and via really galore hops?
• Any supplier tin make codification now. How tin we beryllium that the information fixes our supplier proposes will not break anything?
• How do we build a near-real time, self-updating representation of our situation truthful that we tin spot and extremity attacks arsenic they happen?
• How do we thatch an supplier to reply questions astir our chart very quickly, while making judge that it has conscionable the discourse that it needs, without making mistakes?
• How do we correctly find the proprietor of a fixed assets based connected situation heuristics for illustration actions, tags, logs, files?
• How do we reliably and sustainably way and negociate the authorities of compliance processes for illustration vulnerability management?
• How mightiness we instrumentality “time travel” successful our knowledge chart truthful that we tin replay an onslaught arsenic it happened?

If these sorts of challenges sound inspiring, this is our life’s work, and this is the occupation for you.

Who we’re looking for

• 3+ years acquisition astatine precocious maturation companies. We are looking for accelerated trajectory. You are funny and hungry. 
• Strong acquisition successful distributed systems and unreality tech.
• You are based successful the SF Bay Area and want to activity in-person, in-office 5 days a week.
• Strong consciousness of ownership. You attraction profoundly astir delivering a solution end-to-end.
• You show beardown first-principles, systems thinking.
• You aren’t acrophobic of implementing gnarly business logic to make the lives of jaded information engineers easier. Ideally you tin do this successful a maintainable and elegant way.

Nice to have

• Knowledge of cloud-native infra e.g. Kubernetes.
• Information information knowledge and interest.

Our stack

• Cartography does the ingestion. You’ll beryllium shipping codification that runs astatine complete 70 companies, not conscionable ours.
• Neo4j holds the graph.
• Python backend pinch FastAPI.
• Svelte frontend pinch a civilization homegrown cool-as-hell WebGL chart renderer.
• An MCP server that exposes the chart and everything successful our level to AI agents.
• IaC pinch Terraform.

Benefits

• Health + Vision + Dental
• 401k lucifer (what STARTUP does this?)

Perks

• Gym membership
• Lunches pinch team
• Unlimited PTO

1. Apply
2. Technical screen
3. Call pinch founders
4. Work pinch the squad for a time - we will compensate you for your time
5. Offer