Build CenseCloud with us.
We're a small, opinionated team building the platform that finally makes SaaS governance and cost intelligence one decision. Honest about where we are. Direct about what we're looking for.
Honest about what we're building, opinionated about how.
We took a position on architecture and we ship from it · observation runs at the endpoint, never in your data path. The work here is product work.
Product over portfolio
One platform, two modules. No SKU sprawl, no land-and-expand theatre. CenseRisk and CenseCost share one inventory because that's how the buyer's problem actually sits.
Endpoint-first, by conviction
We observe from the endpoint up · browser extension, agent and IdP signals. No proxy, no MITM. Every one of those is an architecture decision we can defend in a security review.
Compliance as a layer
KVKK is a dedicated risk layer in the engine, with its own scoring and export depth. Same for ISO 27001 and NIST CSF. Reports come from one inventory.
The skill categories we look for.
Every opening here is real. These are the skill categories where strong people change what we ship · if you fit one, talk to us.
Backend & data platform
Node.js, SQLite at scale, migration design, identity graph correlation. The engine that turns four signal sources into one inventory lives here.
Endpoint & browser
Windows MSI engineering, MV3 browser extensions, low-overhead telemetry. The signal source the whole platform sits on top of.
Security & compliance research
SSPM, OAuth-consent risk, KVKK / ISO 27001 / NIST CSF mapping. You translate framework requirements into product-grade controls.
Product & design
Premium B2B SaaS interfaces. CISO and CFO are different readers; the same data should serve both without losing depth or losing speed.
A small team, opinionated defaults.
- Direct ownershipWhoever picks up a problem ships it end-to-end. No handoff theatre. No layers between engineering and the customer.
- Ground-truth over claimsSpecific numbers in marketing or product copy require a path back to the codebase. Timelines and industry averages come from a source or they don't ship.
- Boundaries we keepObservation runs at the endpoint, and the collector takes destination and action only. The same boundary shapes hiring as much as engineering.
- Bilingual by defaultTurkish + English in the same product. We write release notes, customer comms and even internal docs in both, when it matters.
- Premium without excessToken-based design system, line-icons, opinionated whitespace. We ship one thing at a time and finish it.
- Honesty in statusIf we can't honestly say something is GA, we don't badge it GA. Same goes for customer counts, certifications, integration depth.
No open postings today.
We're not currently running a posting funnel · small team, careful additions. But if your background fits one of the categories above, write to us. We read every message, and conversations sometimes turn into roles before they turn into postings.
- A short note on which skill category you fit and why now.
- Links · GitHub, portfolio, a piece of writing, a product you shipped. One link is enough if it's the right one.
- What you'd want the first 90 days to look like. We pay attention to this.