Mitiga

Description We’re looking for Principal Cloud Security Researcher with a strong security background to join our innovative Research team. Why Mitiga? EDR protects the endpoint. Mitiga protects everything else, anticipating and disrupting active attacks across the modern stack and stopping them before they reach the business. Mitiga is the leader in Zero-Impact Breach Prevention, delivered through Agentic Runtime Security for the modern infrastructure — cloud, SaaS, identity, and AI. By delivering the runtime detection and response that security teams already rely on for endpoints, extended to the infrastructure endpoint tools can’t see, Mitiga provides Zero-Impact Breach Prevention, in runtime. The Role We're looking for a Principal Cloud Security Researcher to serve as a senior technical leader within our Research team. This is a high-impact individual contributor role -- you won't manage people, but you'll shape the direction of our entire research function, mentor researchers, and act as a force multiplier across the organization. You'll be the person who takes a vague threat signal and turns it into a detection strategy, a published finding, or a product capability. You'll operate as a trusted deputy to the research team lead, owning the most complex and ambiguous research challenges while raising the technical bar for the team. What You'll Do Drive Groundbreaking Research • Own and drive Mitiga's most critical research initiatives end-to-end - from initial threat hypothesis through detection logic, product integration, and external publication. • Set the technical direction for cloud threat research across AWS, Azure, and GCP, identifying emerging attack surfaces and novel techniques before they become mainstream threats. • Investigate real-world cloud and SaaS security incidents, dissecting attacker tradecraft and extracting insights that evolve our detection capabilities. • Pioneer new forensic investigation techniques and detection methodologies for cloud-native and SaaS environments - pushing the state of the art, not just following it. Be a Voice in the Community • Represent Mitiga as a thought leader through high-quality research publications, conference presentations (BlackHat, DEF CON, RSA, fwd:cloudsec, and similar venues), and open-source contributions. • Build and maintain Mitiga's reputation as a research-driven company that advances the field - not just a vendor with a blog. • Engage with the broader security research community, fostering relationships and collaborative knowledge-sharing. Shape the Product • Bridge research and product - translate threat findings into actionable product requirements, working closely with engineering and product teams to ensure our CDR platform stays ahead of evolving threats. • Design and develop advanced detection algorithms that directly feed into Mitiga's platform, closing the gap between research insight and customer protection. Elevate the Team • Act as the team's go-to technical authority. When researchers hit a wall on complex cloud attack chains, IAM edge cases, or detection gaps - you're who they turn to. • Mentor and grow other researchers through research reviews, pair investigations, code reviews, and by setting quality standards and methodology best practices. • Influence technical decisions org-wide - contributing to architecture, tooling, and strategic research priorities. • Step in as the research team lead's deputy when needed - driving prioritization, representing research cross-functionally, and ensuring continuity. Requirements Who You Are • 8+ years in security research, threat research, or closely related fields (offensive security, detection engineering, incident response, cloud security engineering). Fewer years are fine if your depth and track record are exceptional. • Deep multi-cloud expertise - strong hands-on experience across at least two of the major cloud providers (AWS, Azure, GCP), with working knowledge of the third. You understand the IAM models, logging pipelines, APIs, and attack surfaces that matter in each. • A track record of original research - you've published meaningful technical findings through blog posts, conference talks, open-source tools, or vulnerability discoveries that moved the needle. We want someone who doesn't just consume research - you produce it. • Strong adversarial mindset and critical thinking - you think like an attacker targeting cloud infrastructure, SaaS platforms, identity systems, and Kubernetes. You can model threat scenarios, map out attack paths, and poke holes in defenses. • Ability to operate autonomously on ambiguous, high-stakes problems. You don't wait for detailed specs - you identify what matters and drive it forward. It Would Be Nice If You Also Had • Experience with cloud forensics and incident response (DFIR in cloud/SaaS environments). • Background in red teaming or penetration testing targeting cloud environments. • Familiarity with Kubernetes security, container escape techniques, and cloud-native supply chain risks. • Experience building or contributing to threat intelligence frameworks or detection content libraries. Some More Details and Perks • Location: Tel Aviv, IL • Hybrid work Environment • Competitive compensation package with stock options, educational fund, cibus. • Top of the line equipment For more information visit us at www.mitiga.io Mitiga is an equal opportunity employer, committed to diversity and inclusiveness and aim to attract, retain, and engage a diverse workforce. We consider all qualified applicants without regard to race, color, nationality, gender, gender identity, sexual orientation, religion, disability, age or any other characteristic protected by law.

Description We’re looking for a strong Senior SW Engineer to join our Data team. Why Mitiga? EDR protects the endpoint. Mitiga protects everything else, anticipating and disrupting active attacks across the modern stack and stopping them before they reach the business. Mitiga is the leader in Zero-Impact Breach Prevention, delivered through Agentic Runtime Security for the modern infrastructure — cloud, SaaS, identity, and AI. By delivering the runtime detection and response that security teams already rely on for endpoints, extended to the infrastructure endpoint tools can’t see, Mitiga provides Zero-Impact Breach Prevention, in runtime. The Role Our detection engine is a large Python codebase running PySpark over cloud, SaaS, and identity data at scale on Databricks. You’ll own its engineering quality — hardening what’s there and extending it — working alongside the cyber investigators who define what it should catch. In this role, you will: · Harden and extend a large production Python codebase: refactoring, module and API design, typing, test coverage. · Own and optimize critical PySpark workflows processing massive security datasets across multi-cloud environments — correctness and cost both. · Design the data models and queries the engine depends on, and fix the slow ones. · Work directly with cyber investigators to turn attacker behavior into detection logic that holds up in production. · Build with AI as a core tool: AI coding agents daily, and the AI tooling the team runs on — agentic and automated workflows (n8n or similar) and LLM-backed services on Bedrock or vendor APIs. · Raise the bar on engineering practice — code review, CI, and the standards the team holds each other to. · Contribute to architectural decisions and technical direction as the platform evolves. Requirements Who you are · 5+ years of production Python at a company — typing, refactoring code you didn’t write, module and API design, pytest, packaging, and a real code-review culture. · Hands-on SQL — you design schemas and you fix slow queries, not just read them. · AI-native — AI coding agents (Claude Code) are part of how you work, and you’ve shipped something real on top of an LLM: prompt design, structured outputs, orchestrating multi-step or agentic flows, and testing behavior that isn’t deterministic. Which platform you used matters far less than having done it. · Fluent in Git and CI — you read a failed pipeline and fix it yourself. · Energized by fast-paced startup environments where ownership, adaptability, and collaboration are essential to success. It Would Be Nice If You Also Had: AWS (S3, IAM, compute) and AWS Bedrock · workflow automation and agent platforms (n8n, LangGraph, Temporal) · MCP servers or tool-calling integrations · both Spark and Kafka · a security, detection-engineering, or SIEM background. Some More Details and Perks Some More Details and Perks Location: Tel Aviv, IL Hybrid work Environment Competitive compensation package with stock options, educational funds, cibus. Top of the line equipment For more information visit us at www.mitiga.io Mitiga is an equal opportunity employer, committed to diversity and inclusiveness and aim to attract, retain, and engage a diverse workforce. We consider all qualified applicants without regard to race, color, nationality, gender, gender identity, sexual orientation, religion, disability, age or any other characteristic protected by law.