
Insider Threat for the Modern Enterprise
Candor is building the insider threat layer for the modern enterprise. We help security teams identify their riskiest people, understand the context behind suspicious behavior, and contain threats before damage is done.
You’ll build the core product end to end: investigation workflows, AI-assisted triage, detection modules, enterprise integrations, reporting, and containment actions across tools like Microsoft 365, Slack, Okta, CrowdStrike, SIEMs, and ServiceNow. The stack is TypeScript, React, Node/Express, Postgres/Drizzle, Inngest, and LLM-powered systems.
We’re looking for a product-minded engineer who can move quickly across frontend, backend, data, and AI workflows; cares about polished UX and reliable systems; and wants ownership over critical security infrastructure used by enterprise teams.
You’ll be joining a small YC-backed team in San Francisco, working directly with the founders on a product where the hard problems are real: noisy data, privacy-preserving investigations, explainable AI, and fast response when the stakes are high.
What We’re Looking For
Ideal Background