Backend Architect (Python, Security platform)

About ASAL:

ASAL Technologies was established in 2000 and has grown to become a leading technology company across Jordan, KSA, UAE, and Palestine. With a workforce of over 450 engineers, ASAL offers a wide range of AI agents, services and products, Software and Digital Transformation services, Engineering and R&D services. ASAL Technologies is assembling a team of PD Engineers for a high-end multinational company. The team will be working with top notch engineers in the semiconductor industry from all over the world.

What you will do:

•

Own the architecture: access control, secrets, certificates, migrations, deployment and the move toward multi-tenancy.

•

Own testing: CI, automated access-control tests, log-pipeline health checks, detection tests and release sign-off.

•

Build human-approved response automation (firewall blocking, host isolation) with safety limits and rollback.

•

Act as the final technical escalation for platform incidents and take part in the on-call rota.

•

Review code and mentor the engineers who join the team.

•

Build defences from the attacker's view: threat modelling, vulnerability management and hardening, including against AI-driven attacks.

•

8+ years of software engineering, with a Python backend you took to production and operated.

•

Experience guiding other engineers through design and code review.

•

Strong in FastAPI or a similar framework, SQLAlchemy, PostgreSQL, Docker and Linux.

•

Real experience with authentication and access control (JWT, OIDC, LDAP/AD, MFA, role-based access).

•

A testing mindset: CI, automated tests, and the discipline to stop a release that is not ready.

•

Good knowledge of attack techniques (MITRE ATT&CK), vulnerabilities (CVE / OWASP), defence methods and threat hunting.

•

Familiarity with red-teaming tools (Atomic Red Team, Caldera, Burp Suite, Metasploit) and the traces they leave.

•

Understanding of how AI is used in attacks and red teaming (AI-written phishing, deepfakes, prompt injection, LLM red-teaming), and how to build AI features safely.

•

Strong written and verbal English skills.

Nice to have:

•

Security-product or SOC experience (Wazuh, OpenSearch, Graylog, SIEM).

•

Multi-tenant SaaS and Kubernetes.

•

PKI / OpenSSL and secrets management.

•

Threathunting experience.