Recorded Future
Senior Software Engineer · Gothenburg, Sweden · threat-intelligence platform
- Build and maintain public REST APIs for IP, domain, hash, URL, vulnerability and malware intelligence in Scala, with OpenAPI documentation.
- Build and maintain TAXII 1.1 and 2.1 servers that deliver STIX threat-intelligence feeds to customer security tools.
- Moved services to functional Scala (http4s, Tapir, cats-effect, fs2) and from Akka to Apache Pekko. Added OpenTelemetry tracing.
- Use Apache Kafka for event streaming between services.
- Ship services end to end: Docker, GitHub Actions pipelines, Helm charts deployed with Argo CD on Kubernetes, API gateway configuration, Vault policies and Chef.
- Hardened CI by pinning third-party actions to commit SHAs and fixing code-scanning findings.
- Build internal AI developer tools, including Model Context Protocol (MCP) servers in Python, retrieval-augmented generation (RAG) and model fine-tuning.