Filigran careers: remote jobs, culture and where they hire

Filigran has raised more than $100 million in three years. A €5M seed in June 2023 was led by Moonfire with Motier Ventures, Kima Ventures, Raise Sherpas and Zebox Ventures; a €15M (about $16M) Series A in February 2024 was led by Accel with Moonfire and Motier; a $35M Series B in October 2024 was led by Insight Partners with Accel and Moonfire; and a $58M Series C in October 2025 was led by Eurazeo's growth team with Deutsche Telekom's T.Capital, Accel and Insight Partners. No valuation has been disclosed. Revenue grew 90% in 2025, North American annual recurring revenue grew nearly 4x in the year to March 2026 with 119% net revenue retention and 29 new enterprise and government customers, and partner-attached revenue grew 200%. Board members include Andrei Brasoveanu (Accel), Crissy Costa Behrens (Insight Partners), Mattias Ljungman (Moonfire) and Raluca Ragab (Eurazeo).

Filigran builds open source software for cyber threat management. OpenCTI, its first product, is a platform where security teams store, structure and share threat intelligence, from technical indicators up to campaigns, attacker groups and strategic context, using the STIX 2.1 standard and more than 260 connectors to other security tools. OpenAEV (formerly OpenBAS) uses that intelligence to run breach and attack simulations and crisis exercises, OpenGRC and OpenCRQ add risk governance and cyber risk quantification, and XTM One is the AI agent layer that ties the suite together. Everything ships as open source first.

More than 6,000 organizations use the platforms and the community counts over 6,500 practitioners. Named users include the FBI, the European Commission, Rivian, Capgemini, Bouygues Telecom, EDF, Marriott, Thales, Airbus and the Dutch national police, and the SentinelOne threat intelligence team runs OpenCTI. Rivian says it cut threat response time by 95%. OpenCTI was named a Leader in G2's Winter 2026 threat intelligence grid and holds a 5/5 rating on Gartner Peer Insights, and Filigran sits in the top 30 of IT-Harvest's Cyber 150 list of fastest-growing mid-market cybersecurity companies for the second year running.

Samuel Hassine, CEO and co-founder. Spent five years at ANSSI, the French national cybersecurity agency, first as chief of staff of its security operations center (2015 to 2018) and then as Head of Cyber Threat Intelligence (2018 to 2020), before becoming Director of Security Strategy and Operations for EMEA at Tanium (2020 to 2022); he started OpenCTI as a side project while at ANSSI. He holds a Master of Science in Computer Engineering (Network and Security) from Sorbonne Université and a Sciences Po Aix degree in political science plus a master's in international relations.

Julien Richard, CTO and co-founder. More than 20 years in product and engineering, most recently as VP of Engineering at the data and AI SaaS platform YOOI and before that Director of Engineering at Axway, Lead Engineer at Systar and an engineer at Logica. He holds a Master of Science in computer systems, networking and telecommunications from Télécom Saint-Étienne (2003 to 2006), and had known Hassine for over 12 years from an earlier side project when they built OpenCTI together.

Filigran is one of the few security companies where the product is a standard before it is a sale. OpenCTI had passed 4,000 GitHub stars and 10 million downloads by early 2024 and the code is public, so you can read exactly what you would be working on before you apply. The CTO's stated model is that practitioners adopt the tools first and leaders buy later, which means the engineering work is judged by a community of 6,500 people, not only by a sales team.

The growth is steep and recent: 15 people at the start of 2023, 40 in February 2024, 100 in April 2025, and more than 230 by April 2026. The engineering organization is about 60 people split into product squads for OpenCTI, OpenAEV, OpenGRC, OpenCRQ and XTM One, plus a cross-product XTM Foundation team that owns architecture, quality and shared tooling. Several current openings are the first or fourth engineer on a new product, so the postings promise real influence over data models and architecture rather than feature tickets.

Every posting carries the same four commitments: competitive pay plus equity for everyone, a remote-first and flexible setup, your choice of equipment, and in-person gatherings twice a year.

Filigran writes its values as CORE: Cohesion ("one team and in one direction, grounded in trust"), Openness ("information accessible, ideas challengeable, decisions transparent"), Responsibility ("own our time, actions and impact, always follow through") and Equity ("fairness and respect, making space for every voice to be heard"). The careers page sums up the tone in one line: "We work with focus, clarity and high standards. Always with care and respect, never with ego."

Remote is the operating model, not a perk. Chief People Officer Sahar Sabouni wrote after the March 2026 all-hands in Barcelona that being fully remote and globally distributed "is not a compromise for us. It is a competitive advantage allowing us to enter new markets deliberately and build teams that reflect the environments we serve," and that "remote-first does not mean remote-only." Postings ask for people who are comfortable in a remote, async-first culture with teams across multiple time zones, and hires are picked for their ability to work that way rather than for willingness to relocate.

The founders' own story sets the expectation for craft. Samuel Hassine and Julien Richard built OpenCTI as a side project on evenings and weekends while holding full-time jobs, and the OpenCRQ engineering posting describes the working style they want in return: "We value constructive disagreement, clear reasoning and shared outcomes, and we expect everyone to ask for context, challenge assumptions and learn from one another."

Filigran runs hiring on Ashby with structured recruiter screens and scorecards, and it says candidates should get a "responsive, transparent, and well-managed recruitment process" with quick, clearly owned decisions. There is a standing Spontaneous Application for people who do not match an open role, covering engineering, product, sales, marketing, customer success and operations, and unsuccessful applications are kept for up to two years so you can be considered for later openings.

The bar is senior. Engineering postings ask for 5 to 12 years of experience, the XTM Foundation roles for 8 to 12 years operating distributed high-throughput systems, and sales roles for a track record closing $200K+ ARR enterprise deals. English is the working language everywhere; a few roles require French as well (the XTM One engineer and the North America Associate Customer Success Manager), and most others list French or Spanish as a plus. Postings screen for ownership from day one, bringing structure to ambiguous problems, and a preference for quality and simplicity, and open source contributions and familiarity with STIX, TAXII or MITRE ATT&CK count as bonuses.