Backend Architect (Python, Security platform)

About the job

About ASAL:

ASAL Technologies was established in 2000 and has grown to become a leading technology company across Jordan, KSA, UAE, and Palestine. With a workforce of over 450 engineers, ASAL offers a wide range of AI agents, services and products, Software and Digital Transformation services, Engineering and R&D services. ASAL Technologies is assembling a team of PD Engineers for a high-end multinational company. The team will be working with top notch engineers in the semiconductor industry from all over the world.

What you will do:

• Own the architecture: access control, secrets, certificates, migrations, deployment and the move toward multi-tenancy.
• Own testing: CI, automated access-control tests, log-pipeline health checks, detection tests and release sign-off.
• Build human-approved response automation (firewall blocking, host isolation) with safety limits and rollback.
• Act as the final technical escalation for platform incidents and take part in the on-call rota.
• Review code and mentor the engineers who join the team.
• Build defences from the attacker's view: threat modelling, vulnerability management and hardening, including against AI-driven attacks.

• 8+ years of software engineering, with a Python backend you took to production and operated.
• Experience guiding other engineers through design and code review.
• Strong in FastAPI or a similar framework, SQLAlchemy, PostgreSQL, Docker and Linux.
• Real experience with authentication and access control (JWT, OIDC, LDAP/AD, MFA, role-based access).
• A testing mindset: CI, automated tests, and the discipline to stop a release that is not ready.
• Good knowledge of attack techniques (MITRE ATT&CK), vulnerabilities (CVE / OWASP), defence methods and threat hunting.
• Familiarity with red-teaming tools (Atomic Red Team, Caldera, Burp Suite, Metasploit) and the traces they leave.
• Understanding of how AI is used in attacks and red teaming (AI-written phishing, deepfakes, prompt injection, LLM red-teaming), and how to build AI features safely.
• Strong written and verbal English skills.

Nice to have:

• Security-product or SOC experience (Wazuh, OpenSearch, Graylog, SIEM).
• Multi-tenant SaaS and Kubernetes.
• PKI / OpenSSL and secrets management.
• Threathunting experience.