Software Engineer II - Identity Security Posture Management (ISPM)

About Abnormal AI

Abnormal AI is the leading AI-native security platform, protecting enterprise organizations from the full spectrum of cyber attacks. Powered by behavioral AI that understands human and machine identity, Abnormal detects and prevents attacks that evade traditional security tools — from sophisticated email threats to identity compromise and SaaS application abuse.

Trusted by more than 2,500 enterprises — including over 25% of the Fortune 500 — Abnormal processes billions of identity signals daily to protect people, data at scale.

Why this role exists

To address rapidly escalating customer demand, the BIS organization is growing its team dedicated to Identity Security Posture Management (ISPM). ISPM provides ongoing tracking of an enterprise's identity setups—including Okta, Google Workspace, and Microsoft Entra—revealing hidden vulnerabilities that build up across these networks. It packages these insights into an intuitive, actionable format, empowering security teams to understand their current defense status and prioritize critical remediation efforts.

With identity now serving as the main attack vector for modern enterprises, having complete visibility to understand every identity in your environment and proactively eliminate risk before it's exploited is more essential than ever. As one of Abnormal's fastest-growing divisions, ISPM is seeking a Software Engineer to help build the next generation of identity security defenses.

About the role

This is a hands-on engineering role at the intersection of identity security and distributed systems engineering. You'll write code, build and scale backend services, and contribute to technical designs — while partnering closely with senior engineers and Product Management to deliver what we build next.

You'll work across the backend: services that continuously evaluate millions of identity configurations, and the data infrastructure that powers posture scoring and proactive risk remediation.

Technical Contribution & Design

• Take well-defined problems from product requirements and deliver backend solutions end-to-end — from data modeling through APIs and evaluation logic.