Software Engineer — Guardian Core (m/w/d)

Software Engineer — Guardian Core (m/f/d)

FULL-TIME · 40H · STUTTGART · STARTING IMMEDIATELY

The Guardian Core is the heart of BRANE: the control layer that intercepts, evaluates, and governs every interaction between a user and an AI model before data leaves the organization or a model generates a response. Routing, policy enforcement, redaction, and cognitive evaluation all converge here.

This code determines whether BRANE delivers on the security promise our customers rely on.

As a Software Engineer in the Guardian Core team, you will build the core engine of the product, not a peripheral feature. You will develop systems that run on customer-owned infrastructure, must be deterministic and fully traceable, and cannot afford failure in production.

Your Responsibilities:

Routing Engine

• Design and extend the orchestration logic (Coordinator, Decider, Planner) that classifies requests and routes them to the appropriate model or processing pipeline.

Policy Gate

• Design and implement the policy engine that evaluates every request against customer-defined security and compliance rules, including a reusable policy template framework.

Redaction / Data Loss Prevention (DLP)

• Build the mechanisms that detect, classify, and redact sensitive information such as personally identifiable information (PII), trade secrets, and confidential business data before and after AI model interaction.

Model Store \& Provider Abstraction

• Develop and maintain the abstraction layer for inference providers, enabling seamless integration of local models (vLLM) and external providers (such as OpenRouter) through a unified interface.

Cognitive Judge

• Contribute to the system that semantically evaluates prompts and model responses. This is the most technically demanding and strategically differentiating component of the platform.

Operator \& Administration UI

• Build the administrative interface that enables customers to configure policies, monitor activity, and manage the Guardian Core within their own environment.

Your Profile:

Required

• Several years of experience building production-grade backend systems, ideally using Python and/or a strongly typed language such as Go, Rust, or TypeScript.
• Deep understanding of distributed systems, concurrency, and how to build software that is reliable, deterministic, and observable beyond the happy path.
• Experience with LLM infrastructure or a proven ability to quickly master topics such as inference serving, prompt and response processing, and intelligent model routing.
• You write well-tested, reviewable code and can clearly explain and defend architectural decisions.

Nice to Have

• Experience with vLLM, Whisper, or comparable inference runtimes.
• Background in security engineering, Data Loss Prevention (DLP), or data classification.
• Experience building software for on-premises or air-gapped deployments.

What Makes This Role Unique:

Build the core product

You will work on the component that defines BRANE and directly determines whether our platform delivers its security guarantees.

Engineering depth over feature factories

Architecture decisions are driven by technical reasoning. Code is shared, reviewed, and continuously improved. We optimize for long-term quality, not short-term feature output.

End-to-end ownership

You remain responsible for what you build, from implementation through deployment and operation in customer environments.

Direct access to decision makers

Work closely with the CTO and Product Owner. No unnecessary management layers between engineering and product decisions.