About the role
About GitGuardian GitGuardian is a global cybersecurity scale-up. The company is based in Paris, New-York City, Boston. Among our early investors who saw our market value proposition, are the co-founder of GitHub, Scott Chacon, along with Solomon Hykes , Docker's co-founder. American and European top-tier VC firms have also invested in GitGuardian. GitGuardian leads the way in Non-Human Identity security , offering end-to-end solutions from secrets detection in code, productivity tools and environments to strong remediation, observability and proactive prevention of leaks. Our solutions are already used by more than 600K developers worldwide! About your team and your mission You will join the Public Intelligence team, whose mission is to leverage public data to detect exposed secrets, map them to the correct company, assess their severity, and enable timely and relevant alerts for customers and prospects.
The team works on ingesting public data (notably from GitHub and other sources), identifying the owning organization behind exposed secrets, analyzing the impact of these exposures, and evolving current systems toward more agentic and real-time architectures. The existing systems are mature and battle-tested. We are now at a pivotal moment: the goal is to redesign the end-to-end architecture to make it more robust, scalable, and aligned with significantly larger ambitions, including an agentic layer. Key challenges : Evolve the system from a deterministic approach to agentic systems, improving secret-to-company mapping accuracy and impact analysis. Redesign an existing multi-service architecture into a horizontally scalable and maintainable system. Move from batch processing to real-time processing, enabling secrets to be qualified within minutes of detection on GitHub. Extend the pipeline to new public data sources (Docker Hub, NPM, PyPI, etc.), beyond GitHub. Build a search-oriented data architecture capable of handling hundreds of millions of secrets. Scale the system to full dataset coverage, whereas only a subset is currently processed. In short: you will have real ownership over the architectural decisions that will define the next generation of the pipeline. Your