We're hiring security engineers, AI researchers, and SOC analysts in Dubai and Sydney. IronCastle is built and operated by Permus Software House — a small team doing work that matters for SMBs who otherwise can't afford enterprise-grade protection.
Triage, investigate, and resolve security incidents across our customer fleet. You'll work with a modern detection stack, write runbooks, and mentor junior analysts. SIEM, SOAR, and threat hunting experience required.
Apply → [email protected]Research and develop AI-native detection methods — anomaly detection, behavioural baselines, and LLM-assisted alert triage. Publications welcome. You'll own a detection domain end to end.
Apply → [email protected]Build and maintain the high-throughput data pipeline — event ingestion, normalisation, and the correlation engine. Rust required; ClickHouse, Kafka experience a strong plus.
Apply → [email protected]We're not a 500-person enterprise security vendor. We're a focused team that ships quickly, operates with high autonomy, and holds each other to high standards.
You own your domain. We trust people to make decisions without committees. If you see a better way, build it and show us.
Everything that matters gets documented — runbooks, architecture decisions, incident post-mortems. Clear writing is a core engineering skill here.
We measure ourselves on resolved-without-owner-action, not alerts produced. Every feature decision starts with: does this make customers safer or less anxious?
On a small team, you interact with everyone — from the founder to the on-shift SOC analyst. Your work ships to every customer we protect immediately. The feedback loop is fast.
IronCastle is a product of Permus Software House. All IronCastle roles are Permus positions — you'll be part of the broader Permus team, with access to all company benefits, certifications support, and conference budget.