Search jobs

Mycroft is a security and compliance platform. Our customers trust us to secure their devices, manage their vulnerabilities, and quantify their risk. We have to do two things at once that usually pull against each other: ship fast enough to keep up with hyper-growth, and build something solid enough that customers are comfortable staking their compliance on it.

That tension is the job. We're looking for a full-stack engineer who can move quickly without leaving a mess behind — someone who owns what they build all the way to production and treats "it works on my machine" as the start of the work, not the end.

The team

Our engineering team builds and runs the entire Mycroft platform: product features, vulnerability scanners, data ingestion pipelines, AI-powered workflows, and APIs. We're small, Toronto-based, and frequently work together out of our Toronto office. Leadership writes code too, which means the people deciding what to build feel the same day-to-day friction you do, and are motivated to help fix it.

What you'll own

• Real features, end to end. You'll design, build, and iterate across the stack; backend, frontend, and the infrastructure underneath when it needs you. You take a feature from a rough customer need to something running reliably in production.
• The stability of your work. In a cybersecurity product the bar for "done" is higher. You write the technical design, get it reviewed, ship it, and you're on the hook when it's live.
• Outcomes, not tickets. When a customer-impacting problem surfaces, you work directly with our customer experience and GRC forward-deployed engineers to solve it; you're trusted to do so without waiting for permission.
• Product judgment. We don't have a layer of people translating requirements into specs for you. You'll put on a product hat, weigh in on direction, research technologies, and make architecture and infra calls that stick.
• Our AI capabilities. You'll build the AI-powered features, integrations, and infrastructure behind our workflows and real-time risk quantification.

How we actually work

• AI is a force multiplier, not a crutch. We support the use of AI tools. They’re a line item in your developer tooling stipend, not a guilty secret. But we’re a security focused company. When something breaks, "the model wrote it" isn't an answer. You ship code you understand, discuss in review, and can fix in production.
• Real autonomy. You pick your own tools. You take on the important work that bubbles up. You're trusted to make good decisions and deliver without hand-holding or management overhead.