AI Software Engineer, Finite State
$181-270k
+ Equity. Salary varies depending on location
All-in-one connected security platform
Be an early applicant
All-in-one connected security platform
21-100 employees
Be an early applicant
$181-270k
+ Equity. Salary varies depending on location
21-100 employees
Company mission
To protect our connected world.
Role
Who you are
- We’re looking for a Senior Full-Stack Software Engineer with deep expertise in Next.js, TypeScript, PostgreSQL/Supabase, and AI-assisted development to design, build, and deliver the scalable, secure systems behind our cybersecurity platform
- Thrives at the intersection of secure software engineering, data-heavy systems, and product innovation
- Is fluent in AI tooling (Cursor, Devin, Copilot, etc.) and knows how to turn them into real velocity — not toys
- Can design full-stack solutions, think strategically about risk and performance, and help us move business logic closer to the data layer (Postgres + Supabase)
- Senior Full-Stack Engineer with experience building and shipping production web apps using Next.js/React, TypeScript, PostgreSQL, and a Node-based backend
- AI-native developer who regularly uses AI-assisted dev tools (e.g., Cursor, Copilot, Devin) to move faster, improve code quality, and explore design options, and knows when to verify output
- Strong backend and data modeling skills in Postgres; experience with Supabase (Auth, RLS, Edge Functions, migrations) or similar Postgres-based platforms is a plus
- Security-conscious engineer with a solid understanding of secure web application development, authentication/authorization, and modern security best practices; familiarity with software supply chain security or interest in learning quickly
- Experience deploying and operating applications in the cloud (ideally AWS), with working knowledge of Docker, CI/CD, and modern managed or serverless platforms
- Product-minded and collaborative, balancing technical rigor with user and business needs, caring about testing and maintainability, and communicating clearly in a remote, cross-functional team
What the job involves
- Full-Stack Development: Build and maintain secure, scalable web applications using Next.js/React, TypeScript, and Node – backed by PostgreSQL on Supabase (and AWS RDS during migration). Own features end-to-end from UI to database
- Database-Centric Application Logic: Design and implement business logic close to the data using Postgres functions, views, triggers, Row-Level Security (RLS), and Supabase Edge Functions, minimizing unnecessary middleware and enabling high performance and strong data isolation
- AI-Accelerated Development: Treat tools like Cursor, Devin, GitHub Copilot, and agent frameworks as core parts of your workflow. You'll use them to scaffold and refactor full-stack features, generate and evolve schemas, migrations, and RLS policies and build internal agents that automate repetitive engineering tasks and glue systems together
- Application Security First: Embed security best practices into every layer of development — from secure coding and dependency management to data protection and authentication/authorization (Supabase Auth, OAuth2/OIDC, SSO). Collaborate with security researchers to ensure features align with threat models
- Product Collaboration: Work hand-in-hand with product managers and designers to translate customer pain points into impactful, intuitive features. Participate in product discovery and help shape roadmaps with a strong technical and data-informed perspective
- Architect & Scale: Design and optimize API contracts, edge endpoints, and event flows using Next.js (server components, API routes) and Supabase (Edge Functions, real-time). Consider performance, resiliency, and multi-region deployment (read replicas, data partitioning) as first-class concerns
- Data Expertise: Model and optimize relational data in PostgreSQL for large, multi-tenant workloads. Own indexing strategies, query performance, and data partitioning approaches to support 10x–30x growth in customers and data
- Security-Integrated DevOps: Support automated testing, CI/CD pipelines, database migrations, and vulnerability scanning throughout the development lifecycle. Work closely with infrastructure engineers on Supabase + AWS environments, observability, and performance tuning
- Mentorship & Collaboration: Provide guidance and thoughtful code reviews to peers, fostering a culture of quality, security, and ownership. Help raise the bar on full-stack, data-centric, and AI-native engineering practices
- Continuous Learning: Stay ahead of trends in AI-assisted engineering, agentic systems, application security, Next.js, and modern Postgres/Supabase practices, and share what you learn with the team
- Your 90-Day Success Path
- 30 Days: Ship small full-stack features in our Next.js + Supabase stack; learn our security and data architecture; demonstrate effective use of AI tools + agentic workflows in your day-to-day work
- 60 Days: Own and deliver secure, high-impact features end-to-end; contribute to schema and API design; help refine patterns for RLS, migrations, edge functions, and internal AI/agent tooling
- 90 Days: Lead new initiatives, drive improvements in performance and security posture, shape our full-stack and AI-native architecture, and mentor peers on Next.js, Supabase, and AI-accelerated development
- Our Tech Stack
- Languages: TypeScript, JavaScript, Python
- Frontend: Next.js, React
- Backend / Platform: Supabase (PostgreSQL, Auth, Edge Functions, Storage), Node/TypeScript services
- Data: PostgreSQL (Supabase + AWS RDS during migration), Redis
- Auth & Security: Supabase Auth, OAuth2/OIDC, GitHub, Trivy, Snyk
- Infrastructure: AWS, Docker, Kubernetes (for supporting services), modern CI/CD
- AI Tools: Cursor, Devin, GitHub Copilot, and modern agent frameworks where appropriate
Our take
Widespread adoption of technologies such as the Internet of Things and embedded systems is on the rise. However, this surge in technological integration brings with it a growing concern over potential vulnerabilities within the supply chain. Addressing this issue head-on is Finite State, specialising in providing security solutions for infrastructure and connected devices, primarily by offering comprehensive and transparent insights into the supply chains and files associated with firmware production.
The spotlight on cyber threats has increasingly turned to firmware, with a staggering fivefold rise in firmware attacks in recent years. Finite State asserts that its approach to countering this escalating threat is unparalleled in the market, potentially giving the company a significant advantage over other startups in the competition. Finite State has already carved out a distinctive reputation, notably through its 2019 exposé highlighting numerous vulnerabilities in Huawei's networking products.
Despite the growing awareness among enterprises regarding the looming threat of firmware attacks, reports suggest that most companies are currently underinvesting in firmware security. However, as the threat landscape evolves, a shift in this trend is anticipated. Should this change materialise, Finite State's offerings position the company to capitalise on emerging opportunities in the realm of firmware security.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
57% employee growth in 12 months
Company
Company benefits
- The Usuals: We offer equity for everyone. Medical, dental, vision covered, 401k, short and long-term disability, and life insurance
- Work-life synergy: We take time off and flexibility seriously. Our team is fully remote all across the US, enjoys unlimited PTO, and is entitled to 12 weeks of parental leave
- Mission driven team: We are a team of experts and dedicated professionals—but more than that, we are a diverse group of individuals who support one another in our work and in our mission
- Transparent culture: With bi-weekly business updates, an open-door policy with the executive team, a fireside chat series with our board and other stakeholders, we make sure that everyone on the team has access to what’s going on throughout the company
- Social & supportive environment: We work hard to ensure that Finite State is a fun, comfortable place to work no matter your background. Teams work together to ensure that everyone feels supported and has their needs met, and our vibrant social calendar gives us a myriad of opportunities to kick back and have a good time
Company HQ
Short North Arts District, Columbus, OH
Leadership
Matt Wyckhouse
(Founder & CEO)Studied Computer Science at Ohio State. Previously CTO of Cyber Innovations at Battelle, and then Product Manager at Redacted.
Share this job
View 7 more jobs at Finite State