Nagomi Security

Description As Security Research Team Lead at Nagomi, you will lead the team turning security research and enterprise security data into actionable insights and product capabilities. You will combine people management with hands-on technical leadership, helping customers understand their exposure and get more value from their security tools. We’re looking for a leader with a strong background in cybersecurity research, deep understanding of enterprise security tools, and a data-driven approach to solving problems. You should be equally comfortable mentoring researchers, shaping a research roadmap, and joining customer calls to explain findings and understand real-world challenges. What You'll Do • Lead and Develop the Team: Manage, mentor, and grow a team of security researchers. Set clear goals, provide technical guidance and feedback, and build a culture of rigor, curiosity, and ownership. • Own the Research Roadmap: Define and prioritize research initiatives in partnership with product and engineering. Balance customer needs, emerging threats, and strategic opportunities, taking projects from initial investigation through production delivery. • Drive Security Tool Research: Lead deep research into enterprise security platforms, including EDR, SIEM, firewalls, IAM, and vulnerability management tools. Assess configurations, policies, coverage, and defensive capabilities to identify gaps and improve security effectiveness. • Engage Directly with Customers: Lead technical customer discussions, explain findings clearly, investigate complex questions, and turn feedback into research and product improvements. • Turn Data into Security Insights: Guide how the team collects, models, correlates, and validates security data. Translate fragmented telemetry and configuration data into reliable assessments, prioritized findings, and actionable recommendations. • Shape Integrations and Product Capabilities: Own the research requirements and security logic behind integrations, security control assessments, and exposure prioritization. Work closely with engineering to ensure research translates into accurate, scalable product features. • Set Research Quality Standards: Establish methods for validating findings, testing assumptions, and measuring accuracy. Ensure conclusions are supported by evidence and recommendations account for customer context and operational constraints. • Guide AI-Powered Research and Workflows: Shape the security knowledge, reasoning logic, and evaluation methods behind Nagomi’s AI-powered capabilities, ensuring outputs are accurate, explainable, and useful. • Partner Across Nagomi: Collaborate with product, engineering, data, and customer-facing teams to align priorities, resolve technical challenges, and deliver meaningful customer outcomes. Requirements • Leadership Experience: Proven experience managing security researchers or a closely related technical team, including mentoring, performance management, and project delivery. • Cybersecurity Research Expertise: 6+ years of relevant hands-on experience in cybersecurity research, security control assessment, detection engineering, exposure management, or related fields. • Deep Security Tool Knowledge: Strong understanding of enterprise security platforms, their APIs, configuration models, policies, and telemetry. Ability to evaluate what a tool can protect against, how it is deployed, and where gaps remain. • Data-Driven Research Skills: Experience working with complex security datasets, defining data models, and correlating information across sources. Comfortable using Python, SQL, or similar tools to investigate data, test hypotheses, and validate research at scale. • Technical Judgment: Ability to challenge assumptions, review research methods and results, and guide the team through ambiguous problems while staying close to the technical details. • Product and Delivery Mindset: A track record of turning research into practical capabilities, setting priorities, managing dependencies, and delivering projects end-to-end. • Customer-Facing Communication: Ability to lead technical customer calls, ask thoughtful questions, and explain complex findings to both security practitioners and non-specialist stakeholders. • Broad Security Foundations: Understanding of attacker techniques, enterprise environments, cloud and identity security, and how security controls work together to reduce risk. It’s nice if you have • Hands-on red teaming, penetration testing, adversary emulation, or attack-path analysis experience. • Experience building or evaluating AI-powered security capabilities and agentic workflows. • Experience with Automated Security Control Assessments (ASCA), exposure management, or security control validation. • Experience collaborating with data engineering or data science teams on security data pipelines and analytics. • Experience hiring and scaling a research team. • Published research, open-source contributions, CVEs, or conference presentations.

Description About Nagomi Security teams are not short on tools. They are short on time, alignment, and the ability to actually close exposure. That's why most breaches could have been prevented with a tool that was already in use. Nagomi was built to change that. We are the first Agentic Exposure Ops Platform, designed to prevent the preventable breach by turning fragmented signals into coordinated action. Our agents investigate risk, drive remediation, and verify that issues stay closed, continuously, without adding overhead. Nagomi is helping organizations move from reactive workflows to continuous execution, replacing manual effort with systems that actually move the work forward. The Opportunity As a Senior Security Researcher, you will bridge our core research initiatives at the intersection of proactive exposure management, agentic workflows, and scalable threat modeling. We are looking for an innovator who translates complex security data into product-driven features, taking full ownership from concept to production. What You'll Do • Drive Product-Led Research: Translate complex, real-world security challenges into actionable, product-driven research. Take full ownership of research projects end-to-end, from identifying the security gap to collaborating with engineering to ship platform features. • Drive Proactive Exposure Management: Leverage Automated Security Control Assessments (ASCA) alongside vulnerability evaluation and prioritization to holistically assess organizational risk. Deep dive into enterprise security tools (EDR, SIEM, Firewalls, IAM, etc.) to analyze configurations, map defensive capabilities, and continuously evaluate their effectiveness against real-world threats. • Build Security Tool Integrations: Drive the technical research and define the data models required to actually build deep, functional integrations into diverse security platforms, ensuring the accurate extraction of telemetry, policies, and configuration data. • Build AI & Agentic Workflows: Define, design, and implement the logic and knowledge base that feeds Nagomi's AI-powered agents, ensuring they deliver accurate, context-aware security guidance and automated risk assessments. • Map Attack Paths: Define realistic attack flows, identify toxic combinations of misconfigurations, and surface the security gaps that help customers prioritize the risks that actually matter. • Engage with Customers: Work directly with customers to help them understand their exposure, translate your research findings into meaningful posture improvements, and gather feedback to drive product innovation. • Cross-Functional Collaboration: Partner closely with product, engineering, and data teams to embed security insights into everything we build. Requirements • Experience: 5+ years of hands-on experience in cybersecurity research, exposure management, vulnerability analysis, or threat intelligence. • Product Mindset: Strong ability to tackle projects end-to-end, translating theoretical security research into tangible product features and automated detection logic. • Broad Security Knowledge: Deep understanding of enterprise security tools (EDR, NDR, SIEM, VM, etc.), network topology, and how security components interact to impact network posture. • AI/Agentic Expertise: Proven experience building or heavily shaping AI-powered systems and agentic workflows. You must be able to point to concrete examples where you have integrated LLMs or AI processes to solve complex technical problems. • Attacker's Perspective: Solid foundation in how adversaries think, move laterally, and exploit enterprise environments, paired with expertise in leading vulnerability prioritization standards (MITRE ATT&CK, CISA KEV, EPSS). • Communication: Strong communication skills with demonstrated experience working directly with customers, stakeholders, and cross-functional engineering teams. It’s nice if you have • Experience collaborating with data science, data engineering, or analytics teams to structure security datasets and build scalable intelligence pipelines. • Published research, CVEs, conference talks, or open-source contributions.

Description AI moved attackers faster than human-paced defense cycles can absorb, and pushed exposure data past what any team can triage by hand. Our platform runs AI agents that investigate on their own, verify whether existing controls neutralize the risk, and return a validated case with root cause, owner and remediation. How those agents earn a security team's trust - what they decide alone, what they escalate, what evidence they show - is unsettled across the industry, and what gets built now sets the pattern. Security teams own thirty tools and still can't say which threats those tools actually stop. Nagomi answers that question. We connect read-only to the stack a company already runs - CrowdStrike, Microsoft, Okta, Qualys, 40+ more - and build a live model of what's exploitable, what's already covered, and what to fix first. As the Product Manager, you'll own a key domain of the platform end-to-end: vision, strategy, roadmap, specs, delivery, adoption. Direct work with CISOs, detection engineers and SOC teams, and what you decide from those conversations ships. Reports to the VP Product. Responsibilities: • Set the strategy and roadmap for your domain, and own what it delivers. You decide what gets built, what waits, and what we drop. • Spend real time with customers and prospects. Sit in their environment, watch how their team works, find the problem behind the request. • Write the specs and work with engineering and design through delivery. Stay in it until it ships and people use it. • Build the narrative for what you ship - the value story a CISO repeats to their board, not a feature list. Sales, marketing and CS should be able to sell it from your words. • Bring your product to market with sales and marketing, then track adoption and come back with the next round of decisions. • Watch the market: competitors, new threats, how CTEM and agentic security keep shifting. Turn that into where we go next. Requirements • 4+ years in product management, with at least 2 building cybersecurity products. • Strong technical background. You can go deep with engineers on architecture and trade-offs, and hold your position. • A track record of products that practitioners kept using - measured by daily use, not by the logo count. • Works well across R&D, sales, marketing and customers - different people, different languages, same goal. • Builds narrative. Sells the value, not the feature. • Writes clearly, decides with incomplete information. It’s nice if you have • Hands-on background in security operations, detection engineering or offensive security is a plus.

Description Security teams are not short on tools. They are short on time, alignment, and the ability to actually close exposure. That's why most breaches could have been prevented with a tool that was already in use. Nagomi was built to change that. We are the first Agentic Exposure Ops Platform, designed to prevent the preventable breach by turning fragmented signals into coordinated action. Our agents investigate risk, drive remediation, and verify that issues stay closed, continuously, without adding overhead. Nagomi is helping organizations move from reactive workflows to continuous execution, replacing manual effort with systems that actually move the work forward. At Nagomi, engineering isn't a service function it's where product happens. We're looking for a Fullstack (Product) Engineer who lives at the intersection of craft and product sense:You care as much about why we're building something as how it feels in the user's hands. You're an engineer who connects naturally with other engineers, and who enjoys mentoring and ramping up the people around you. You'll own experiences end-to-end from the first PRD conversation to the KPI dashboard weeks after ship. You'll shape our component library, raise the bar on our frontend infra, and help define what "good" looks like across the R&D org. This isn't a role where you get handed pixel-perfect mocks and a closed ticket. You'll have opinions, and we'll want to hear them. What you'll do • Craft the experience. Design and build polished, performant UI in Vue 3 (Composition API) from the tiny interaction details to the data layer behind them. • Own the full journey of a feature. Partner with Product on the PRD, define the KPIs that actually matter, ship it, then track whether it moved the needle and iterate honestly if it didn't. • Shape the component library. Evolve our patterns, primitives, and the infra that lets the whole team build faster without sacrificing quality or consistency. • Go full-stack when it counts. Write Node (NestJS) services and work across our data stack (Postgres, Snowflake, ClickHouse) to deliver features truly end-to-end. • Push AI-assisted development forward. Build the guardrails, skills, and workflows that let engineers contribute code quickly and safely you'll help make AI a force multiplier for the whole team, not a liability. • Raise the bar org-wide. Your taste in UX, and code quality should ripple well beyond your own team. Requirements What we're looking for • 5+ years of full stack development ( frontend, backend, db) • Deep frontend expertise and a genuine passion for the user journey and UX you sweat the details most people skip. • Solid backend knowledge (NestJS) and comfort moving across a modern data stack. • A track record shaping SaaS product experiences: design systems, component libraries, frontend architecture, and the best practices and infra that hold them together. • Real product instinct is comfortable inside a PRD, opinionated about KPIs, and honest about whether a feature actually succeeded. • Someone who wants to shape the wider R&D org, not just close tickets you see the system, not just the screen. Bonus points • Experience building or scaling design systems at a fast-growing SaaS company. • An eye for performance, accessibility, and the craft that separates "it works" from "it's delightful." Why here? We're a small, high-trust R&D org where a single engineer can define how thousands of security teams experience the product. If you want your fingerprints on the whole thing the UX, the infra, the way we build this is that seat.

Description Security teams are not short on tools. They are short on time, alignment, and the ability to actually close exposure. That's why most breaches could have been prevented with a tool that was already in use. Nagomi was built to change that. We are the first Agentic Exposure Ops Platform, designed to prevent the preventable breach by turning fragmented signals into coordinated action. Our agents investigate risk, drive remediation, and verify that issues stay closed, continuously, without adding overhead. This is not another dashboard. It is a new way for security to operate. Recognized by Gartner® as a Cool Vendor in ASCA, Nagomi is helping organizations move from reactive workflows to continuous execution, replacing manual effort with systems that actually move the work forward. We are building something category-defining. The kind of shift people point back to later and say, "that changed how this works." The Role  We are looking for a Growth Marketing Lead who wants to build, not maintain. Someone who sees demand generation as more than channels and metrics, and who will build our entire marketing program with AI at its core. This is not about using AI as a side tool. It is about designing how we generate demand, create content, reach buyers, and measure impact around what AI makes possible today. You will shape how Nagomi shows up, how we break through, and how we convert momentum into revenue. What You'll Drive • Build an AI-Native Marketing Engine — Design programs, workflows, and team practices where AI is central to how we plan, create, and scale • Create Pipeline That Matters — Build integrated campaigns that generate real pipeline and accelerate deals, not just activity • Bring Big Ideas to Market — Turn bold messaging into campaigns people notice, remember, and act on • Own the Full Funnel — From first impression to closed deal, influence how prospects move and why they convert • Connect Teams and Execution — Work across product marketing, sales, SDRs, and field to keep everything in sync • Turn Insight into Action — Use data and AI to refine, improve, and scale what works, fast Requirements What You Bring • A track record of building pipeline in B2B SaaS • Background working at cybersecurity companies, with a solid understanding of the market and buyer • Hands-on fluency with AI tools and a strong point of view on how they change marketing • Strategic thinking paired with the ability to execute without waiting for perfect conditions • Strong instincts for messaging, positioning, and what resonates in market • Experience working closely with sales and owning outcomes, not just outputs What Sets You Apart • You think in systems, not one-off campaigns • You push for ideas that stand out, not blend in • You treat AI as a core capability to build around, not a trend to follow • You focus on impact, not activity