AI Engineer

Cybereact Group builds SaaS products at the intersection of cybersecurity, legal-tech, and AI.

Our customers are law firms, forensics teams, in-house counsel, and individuals responding to cyber and financial incidents.

This is an architect-track role. You'll work directly with the founder, ship through AI tools, and grow into leading the agentic systems and the team behind them.

Why this role might be different:

Most "build something new" roles are at startups with a burning runway. Most "stable company" roles are at corporates where you maintain instead of building. We're neither. Cybereact has been profitable for years, with the budget and the mandate to build new AI-native products without VC pressure or 18-month survival math. If you have the building instinct of a startup but you've had enough of dev shops that close mid-sprint or seed rounds that fold — this is built for you.

How the work happens:

→ 50% architecture, system design, AI-native development

→ 30% reviewing and integrating LLM output to production quality

→ 20% coordinating with the external dev team (with a path to leading it)

The stack:

TypeScript · Python · SQL · Next.js 15 App Router · React · Supabase (Postgres, RLS, Edge Functions, pgvector) · Vercel · GitHub Actions · n8n · Anthropic SDK · Gemini · MCP servers · multi-tenant architecture · RAG pipelines · agentic workflows

Development environment: Claude Code, Cursor, and similar — at expert level.

What we're looking for:

* An architect by mindset - you decide where logic belongs (client vs server, API vs DB function, deterministic flow vs agent) before writing code

* 5–8 years of full-stack production experience

* Strong fluency in TypeScript and Python; solid SQL (complex Postgres, RLS, performance)

* Production-quality features shipped via AI-native development — not just "I use Copilot."

* LLM-powered features in shipped products: RAG, agents, evals, prompt orchestration

* Multi-tenant, security-aware architecture

* Advanced n8n

* Production fluency: Vercel, CI/CD, observability, latency, and cost

* Capacity to grow into team and agentic-systems leadership

Significant advantage - cybersecurity background in any of the following:

* Reactive / Defensive: incident response, DFIR, SOC, threat hunting

* Offensive: red team, pen testing, exploit research, vulnerability research

* Investigative: OSINT, digital forensics, blockchain tracing, fraud investigation

The terms: Full-time, exclusive. 4 days from our Tel Aviv office, 1 day from home. Hours 12:00–22:00 (US-aligned). Israel only.