Senior Software Engineer, Gamified Phishing Training (Full-Stack)

Job description

## **Our mission and why it matters** We are on a mission to make humans the strongest security layer. Human risk remains one of the biggest vulnerabilities and traditional awareness training is not enough. We take a different approach by combining AI-driven personalization, real threat detection, and behavioral science to actively protect people and organizations. We don't just simulate risks. We build the tools that detect and stop them. ## **Why this role matters** We are growing by over 50% yearly, which means our tech is scaling rapidly, we are expanding into new regions, and our global user base continues to grow at pace. As a Senior Software Engineer, you will play a key role in shaping the future of our gamified phishing platform, our oldest and most well-known flagship product that helps 5+ million people build safer online behavior daily. It is incredibly rare in cybersecurity to build a product that end-users genuinely want to use, but our gamification is so engaging that users actively reach out to ask for more simulations when they finish their training paths! You’ll join the team responsible for this core product at a pivotal stage of growth, where scalability, product quality, and speed of execution matter more than ever. ## **What you’ll own and drive** Build and deliver scalable, highly reliable full-stack features for our gamification platform. Develop innovative new ways to train users on evolving cybersecurity threats. Contribute to the long-term evolution of our architecture by successfully scaling systems that were not originally designed for our current, massive scale. Collaborate closely with Product Management and your engineering peers to plan, scope, and execute projects together in a highly collaborative environment with strong ownership and accountability. These are some example projects that you may work on: - Simulations that train against modern AI attacks; this year we have released deepfake simulations and simulations where the agent calls the user pretending to be their coworker - Extend our simulation engine to recreate modern multi-channel attacks that target users across email, chat, and phone over weeks - Design and ship gamification features (leaderboards, achievements, learning paths) that keep users engaged ## **What success looks like** In your first 90 days, you’ll become productive in our tech stack, start shipping new features and actively contributing to the planning and execution of our core product roadmap. By month six, you’ll be confidently driving significant end-to-end projects, contributing to architectural decisions, and operating as a trusted technical owner within the team. ## **What makes you thrive here** You’ll probably have at least five years’ experience working in the industry, but we care far more about your impact, ownership, and product thinking than the number of years on your CV. We’d especially love to hear about products you’ve helped build, how you approached technical and product decisions, and the role you played in making them successful. You have: - Hands-on experience with TypeScript and React, along with experience building backend services and APIs. We use Node.js and MongoDB. - Experience building and maintaining large-scale systems utilized by real end-users. - A track record of reliably and consistently delivering results. We prioritize high-capacity execution and a strong builder mindset over hyper-specific niche skill gaps. - A strong product mindset and the ability to balance technical quality with user value and business impact. - An AI-native mindset, including curiosity and excitement around building software with AI-assisted workflows and teams of agents working in parallel. - Bonus points if you also: Have a deep focus on system logic and architecture (deep UX expertise is completely not necessary for this specific role). ## **Who you’ll work with** You’ll join our dedicated attack capabilities product team in an actively growing, highly capable group focused on building engaging experiences that genuinely help users change their security behavior. The team combines strong product thinking, technical ownership, and a high-performance mindset with a supportive, low-ego culture. We care deeply about the user experience, positively surprising our users with small but important wow moments while building something that supports their personalized training journey. Our day-to-day work is highly collaborative: planning projects together, refining ideas as a team, and shipping impactful features quickly. While everyone has strong ownership over their own domain, success comes from working closely together and continuously improving how we build. ## **What you can expect from us** - **Compensation**: Monthly salary of €6000–€7500 depending on your experience. Your placement within this band is grounded in our internal role leveling and depends on a combination of your technical expertise, scope of ownership, and overall capacity to deliver results. - **Working ways**: We work in a hybrid work setting (please note this is not a fully remote position). You are expected to visit the Helsinki office a minimum of 1-2 days per week. - **High performance meets high humanity**: We bring an incredibly driven, high-impact energy to our work, but we leave our egos at the door. You will be surrounded by wildly talented, dedicated colleagues in an environment built on extreme kindness, support, and psychological safety. - **Authentic trust & autonomy**: We hire great people and trust them to do great work. You will find a culture free of micromanagement, giving you the autonomy to take real ownership, drive impact, and shape things early on. - **A product you can be proud of**: It is incredibly rare in cybersecurity to build a multi-award-winning product that end-users genuinely love. You will join a fast-paced, technically sophisticated team making a real, measurable impact against cybercrime. - **The perks that matter**: Alongside this amazing community, you will enjoy extensive healthcare with other benefits and our beautiful office in Helsinki (complete with a gym and swimming pool!). ## **Recruitment Process** We want to get to know you and how you think! Our process includes: 1. Interview with Talent Acquisition (30 min, remote) 2. Hiring Manager Interview with Team Lead (60 min, remote) 3. Technical Assignment (take-home) and Panel Interview (90 min, on-site) 4. Meeting with VP of Engineering (60 min, remote). 5. Reference checks and final offer. ## **About Hoxhunt** Hoxhunt was founded in 2016 by four visionaries. Today we are a global team of +300 amazing Hoxhunters advancing a truly AI-native category leader in human risk management, with key hubs in the United States, the United Kingdom, Singapore, and Finland. We are proud to be an award-winning, fast-growing software company, recognized by G2 and Gartner, named to TIME Magazine's list of the World's Top EdTech Companies, and featured for our innovation in major publications like Fast Company, TechCrunch, Forbes, and Inc. As a multi-product company, Hoxhunt goes beyond traditional security awareness. We don't just educate employees through frequent, personalized, and behavior-changing cybersecurity training - we also actively build real threat intelligence and response tools that protect organizations against malicious cyberattacks every single day. *Be among the first to know about our open positions. Drop your details in our Talent Community, and we will reach out when there is a match!*