About this role
**About GhostEye**
GhostEye is a YC S25 cybersecurity company with **government and Fortune 100 customers**. We build software for authorized social engineering tests across phone calls, SMS, and deepfakes.
We are extending the platform into **post-click compromise testing**, including account and session access, downstream permissions, and evidence of whether security controls detect or block the activity.
We operate our own fine-tuned model, voice synthesis, and self-hosted phone infrastructure. Our primary engineering stack is **TypeScript, Rust, and AWS**.
The role
You will build and operate the services that run campaigns, coordinate calls and messages, track execution, and collect results. The work requires a solid understanding of concurrency, networking, state management, and failure handling.
What you will work on
* Backend services and campaign execution in TypeScript and Rust.
* Scheduling, cancellation, retries, and recovery for long-running workflows.
* Phone and SMS infrastructure, including routing, delivery status, recording, and provider integrations.
* Latency across model responses, speech generation, and call delivery.
* Services and integrations for scoped account, session, and downstream access checks.
* Event processing that handles duplicate, delayed, and out-of-order events.
* AWS deployments, monitoring, authorization, and tenant isolation.
What we are looking for
* Strong proficiency in TypeScript or Rust and the ability to work across both.
* Experience building and operating production backend services.
* A solid understanding of API design, concurrency, data modeling, and distributed systems.
* Experience with AWS and diagnosing problems across services.
* The ability to reason through timeouts, partial failures, and recovery without losing or misreporting execution state.
Experience with telephony, streaming audio, model serving, enterprise identity systems, or offensive security is useful.
Communication matters
You should be able to document service behavior, explain design decisions, and make assumptions explicit. We expect clear updates during incidents, useful handoffs between engineers, and written explanations of what failed, what changed, and how the fix was verified.
Why join
You will have direct responsibility for systems used by government and Fortune 100 customers. You will work closely with a small team and help decide how the platform is built and operated. Our founder previously led BlackRock’s red team and worked in offensive cyber operations at MITRE.