Jobs in Tel Aviv-Yafo

Description What you’ll own You’ll own the AI at the core of Fig's product, which keeps SOC detection and response in sync with constant change. You’ll decide what it does, how security teams work with it, how we know it’s getting better, and how we grow it. What you'll be doing • Define the strategy and roadmap for Fig's agentic capabilities • Work with engineering to execute on it while constantly evolving it with latest tech developments. • Implement agentic product methodologies for building, evaluating and shipping AI based products • Work with SecOps teams to evolve the roadmap and build capabilities that solve their hardest problems • Identify product evolution opportunities from market and technology signals, and strategize product development accordingly • Enable sales and marketing teams to meet the market pain use cases in XL scale Requirements You’ll fit if • You have 5+ years in product management, including at least 1 year as a PM on an AI product • Big bonus for background in building in the security operations space • You’ve shipped LLM-based features to real users, and you know how work and where they fail • You've worked with big enterprise clients, understand how they operate, what drives business decisions and how it translates to great products • You're a persons' person, hungry for winning and cut-to-the-chase. • You have strong English communication skills.

Description What you'll own Fig's product does the work a SecOps engineer does: it investigates coverage gaps against live enterprise security data, authors and tests detection logic, and tunes noisy alerting. That means product decisions here are SecOps engineering decisions, and they need someone who has actually done the job. You'll join Fig's product team and own the detection engineering surface of the product - what good coverage analysis looks like, what correct detection content looks like, what a security team should be able to trust the product to do on its own. Fig is defining a category around Security Operations Resilience, and the fastest way to get that right is to be genuinely credible with the SecOps engineers we're building for. What you'll be doing • Drive the detection product domain: Bring deep expertise in SecOps engineering across SIEM, data pipelines, and SOAR, and help the product team define where the product should excel. Develop a strong understanding of the day-to-day work of SecOps engineers and the challenges they face. • Turn expertise into product insight: Conduct deep, hands-on research across real security environments, SecOps engineering practices, data, and tooling. Combine customer feedback with your own experience and the knowledge of the broader team to identify meaningful problems, opportunities, and product directions. • Shape and execute the roadmap: Translate product insights into a focused roadmap aligned with company strategy and customer needs. Partner with the product and engineering teams to prioritize initiatives, make tradeoffs, define outcomes, and drive execution from discovery through delivery. • Turn problems into product direction: Translate ambiguous problems into clear product requirements and actionable plans. Work closely with engineering, design, and security experts to ensure complex technical problems are translated into products that are useful, intuitive, and technically sound. • Shape and evaluate AI agent capabilities: Define what Fig’s AI agent should be capable of doing as a SecOps engineer, what good looks like, and where it must be trusted or constrained. Develop evaluation frameworks, scenarios, and ground truth to measure and continuously improve agent performance. • Own product quality and outcomes: Maintain a deep understanding of how the product is used in real-world security operations. Validate assumptions, identify gaps, and use customer feedback, product data, and operational experience to continuously improve the product and its direction. Requirements What you'll bring • Detection engineering depth: 5+ years in detection engineering or security engineering, with detections you personally wrote, tested, tuned, and maintained in production. • SecOps stack fluency: Hands-on experience with SIEM, SOAR, security data pipelines, or security data lakes, including the query languages and data source configuration work that comes with them. • Content and automation experience: Comfortable building detection content, wiring up data sources, and building automated response workflows - and opinionated about where each one breaks. • Product instinct, not necessarily a product title: You can get from "this is broken" to a clear, buildable spec without being handed a template. Prior Product Manager or Technical Product Manager experience is a strong plus. • Communication that lands both ways: You can hold a deeply technical conversation with a SecOps engineer and a clear one with a security leader. Experience working directly with customers or external security teams is a strong advantage. • Curiosity about AI in the loop: Interested in how AI and ML change detection and monitoring, and willing to reason carefully about what an agent should and shouldn't be trusted to do inside a customer's security environment. • 0-to-1 judgment: Comfortable in an early-stage environment with an emerging category, limited existing structure, and a high bar for ownership.

Description What you'll own Fig's product is built around an AI agent that security analysts and detection engineers work with directly. It investigates coverage questions against live enterprise security data, authors and tests detection logic, and tunes noisy alerting. That agent is already in production with enterprise design partners. Now we need to make it dependable and scalable enough for GA. You will own that evolution: the agent architecture, its evaluation and quality system, and the production engineering around it. This is a hands-on senior IC role with real architectural authority - you set the technical direction and you write the code. The agent operates inside customer security environments, where a wrong action can become a customer incident. Correctness, isolation, observability, and evaluation are not polish. They are the product. What you'll be doing • Agent architecture: Design the evolution from today's production single-agent system to a multi-agent one: orchestration, task decomposition, runtime and framework choices, and a migration path that does not break what design partners already rely on. • Agent capability: Own the prompts, context, skills, and tool design that make the agent genuinely good at detection engineering across multiple security platforms, not just plausible-sounding. • Evaluation platform: Build the harnesses, judges, and golden datasets that turn "the agent feels better" into a number, plus the CI gates that keep regressions from shipping. • Reliability and safety: Keep long-running agentic sessions healthy in production, and build the isolation and guardrails required of an agent working inside enterprise security environments. • Production debugging: Work real failures from production traces, and turn each one into an eval case that can never regress silently. • Technical direction: Make the calls on architecture, sequencing, and quality bar and be accountable for the outcome, including raising how AI-natively the whole team builds. • Cross-team partnership: Partner with product and customer-facing teams on what the agent should do, and with platform teams on the data and integrations it depends on. Requirements What you'll need • Senior engineering depth: You have 6+ years of experience building and operating production software, with strong backend and distributed-systems fundamentals and experience designing APIs and services. • Shipped agents, not demos: You have taken an LLM agent system with tool use, multi-turn interaction, and planning to real users, and you can talk concretely about how it failed and what you did about it. • Architectural judgment: Informed opinions on single-agent vs. multi-agent design, orchestration patterns, and the current framework and SDK landscape, with the pragmatism to pick the boring option when boring wins. • Eval discipline: You have built or owned evaluation for an LLM system, including golden datasets, LLM-as-judge with calibration, and regression gates in CI, and you can quote the metrics you moved. • Tool design instincts: You know when a deterministic tool beats a model call, how to design tool contracts an LLM will not misuse, and how to keep cost and latency under control. • Distributed systems fluency: Streaming, stateful services, and the operational instincts to keep long-running agent sessions alive in production. • Ownership in ambiguity: You can lead an area as a hands-on IC in an early-stage environment with little existing structure. Security domain experience such as SIEM platforms, SOC workflows, detection engineering, or security query languages, and experience with modern agent SDKs and protocols such as MCP, are strong advantages.

Description Attackers don't hack- they log in. Almost every major breach starts with a credential that should never have existed. Venice ends standing access for every person, service account, and AI agent across cloud, SaaS, and on-prem. Our agentless platform deploys in minutes, swapping stale access workflows for real-time, just-in-time enforcement. But we're not only building this to stop breaches and replace clunky, legacy PAM setups. We're building it so teams can hand real privileges to AI agents and move faster, not just apply controls that slow everything down. Every company is about to put agents inside its most sensitive systems, and we're making it secure and possible for those agents to be a true part of the workforce. Backed by Index Ventures and IVP, trusted by Fortune 200 security teams, and deployed in some of the most complex enterprise environments in the world. The rules for how AI gets access are being written right now. Come write them with us. What you will do: • Multi-currency and intercompany: ILS/USD books, intercompany billing between the Israeli and US entities, intercompany reconciliation. • Israeli payroll: Manage the end-to-end payroll process, including salary calculations, payslips, salary payments, pension, study fund, new hires, severance, leave and separations, and statutory filings monthly and yearly, and coordination with pension and insurance providers • Own the full bookkeeping cycle: journal entries, accounts payable, accounts receivable, bank reconciliations, credit card reconciliations accruals, prepaids, fixed assets and month-end close. • Priority/Netsuite (Israel) and QuickBooks Online (US). standalone reporting per entity. • Own monthly, quarterly, and annual closings • Reporting and analysis: Budget vs. Actual and variance analysis, plus ad hoc analyses on payroll, vendor. Requirements • 7+ years of hands-on bookkeeping experience, preferably within a high-tech/ Start-up company. • Certified Bookkeeper level 2- mandatory (level 3- advantage) • Certified Payroll Accountant certification - mandatory • Experience or familiarity with NetSuite • Solid working knowledge of Israeli bookkeeping practices, VAT, and tax requirements. • Fluency in English, spoken and written. • Strong attention to detail, highly organized, and persistent with task execution and follow-ups. • Ability to manage responsibilities independently. • Plus- Familiarity with Mesh. Why join us? The Timing The timing couldn't be better. Legacy privileged access management is dead, the market leader was just absorbed, and there's a narrow window to define what replaces it. We're in that window right now. The Culture Our team is small with exceptional people who are actually fun to work with and the distance between your idea and production is short. Plus, we take our coffee seriously. If this sounds like your kind of challenge, apply- even if you don't tick every box.

Description Attackers don't hack- they log in. Almost every major breach starts with a credential that should never have existed. Venice ends standing access for every person, service account, and AI agent across cloud, SaaS, and on-prem. Our agentless platform deploys in minutes, swapping stale access workflows for real-time, just-in-time enforcement. But we're not only building this to stop breaches and replace clunky, legacy PAM setups. We're building it so teams can hand real privileges to AI agents and move faster, not just apply controls that slow everything down. Every company is about to put agents inside its most sensitive systems, and we're making it secure and possible for those agents to be a true part of the workforce. Backed by Index Ventures and IVP, trusted by Fortune 200 security teams, and deployed in some of the most complex enterprise environments in the world. The rules for how AI gets access are being written right now. Come write them with us. What you will do: • Own and design the connectivity layer from day one, building the secure access infrastructure that links Venice's cloud platform directly into customer networks. • Build features end-to-end across a microservices stack, mostly backend with supporting frontend, to solve critical networking and OS-level security challenges across diverse, locked-down customer environments. • Scale secure access on unpredictable infrastructure using an advanced tech stack focused on Windows and Linux OS internals, proxy architectures, and identity and access primitives. • Drive direct impact on Venice and the future of identity security by enabling secure, reliable access across enterprise networks with complete ownership and technical autonomy. Requirements • 5+ years building backend services and shipping them to production end-to-end, in a cloud-native microservices environment. • Strong networking, OS internals (Windows / Linux) and security fundamentals, you understand how traffic moves and how trust gets established across systems (think TLS, DNS, proxies, identity and access primitives), and you're comfortable reasoning about it end to end. • Calm and methodical in environments you don't fully control, comfortable debugging across firewalls, proxies, and trust boundaries when part of the system is a black box. • A security mindset, you think in terms of trust, blast radius, and what could go wrong, not just the happy path. • Strong ownership instinct, you take problems from ambiguity to a reliable, shipped solution. • Clear communicator with strong English, you can explain a tricky networking issue to a colleague, in writing and live, without losing them. Why join us? The Timing The timing couldn't be better. Legacy privileged access management is dead, the market leader was just absorbed, and there's a narrow window to define what replaces it. We're in that window right now. The Culture Our team is small with exceptional people who are actually fun to work with and the distance between your idea and production is short. Plus, we take our coffee seriously. If this sounds like your kind of challenge, apply- even if you don't tick every box.

Description Attackers don't hack- they log in. Almost every major breach starts with a credential that should never have existed. Venice ends standing access for every person, service account, and AI agent across cloud, SaaS, and on-prem. Our agentless platform deploys in minutes, swapping stale access workflows for real-time, just-in-time enforcement. But we're not only building this to stop breaches and replace clunky, legacy PAM setups. We're building it so teams can hand real privileges to AI agents and move faster, not just apply controls that slow everything down. Every company is about to put agents inside its most sensitive systems, and we're making it secure and possible for those agents to be a true part of the workforce. Backed by Index Ventures and IVP, trusted by Fortune 200 security teams, and deployed in some of the most complex enterprise environments in the world. The rules for how AI gets access are being written right now. Come write them with us. What you will do: • Own the user-facing surface of the Venice platform - turn genuinely complex security workflows (access requests, policy, audit trails) into interfaces people can use without training. • Deliver features end-to-end: from technical design and API contracts through frontend implementation, backend integration, and production rollout. • Work across the stack - React and Next.js on the frontend, cloud-native microservices and SQL/NoSQL databases on the backend, running on our cloud infrastructure. • Take part in shaping how the platform evolves - you'll have real autonomy to propose technical solutions, influence architecture decisions, and see your work reach users quickly. Requirements • 5+ years building production frontend, with real depth in React (Next.js a plus). • Experience designing component systems and shared UI patterns, not only consuming them. • Solid familiarity with backend development, including hands-on experience with microservices, and both SQL & NoSQL databases. • Strong product instincts: you push back on designs that won't work and care what the thing feels like to use. • Self-starter who owns projects to completion. • Strong communication skills and fluent English. Why join us? The Timing The timing couldn't be better. Legacy privileged access management is dead, the market leader was just absorbed, and there's a narrow window to define what replaces it. We're in that window right now. The Culture Our team is small with exceptional people who are actually fun to work with and the distance between your idea and production is short. Plus, we take our coffee seriously. If this sounds like your kind of challenge, apply- even if you don't tick every box.

Description Attackers don't hack- they log in. Almost every major breach starts with a credential that should never have existed. Venice ends standing access for every person, service account, and AI agent across cloud, SaaS, and on-prem. Our agentless platform deploys in minutes, swapping stale access workflows for real-time, just-in-time enforcement. But we're not only building this to stop breaches and replace clunky, legacy PAM setups. We're building it so teams can hand real privileges to AI agents and move faster, not just apply controls that slow everything down. Every company is about to put agents inside its most sensitive systems, and we're making it secure and possible for those agents to be a true part of the workforce. Backed by Index Ventures and IVP, trusted by Fortune 200 security teams, and deployed in some of the most complex enterprise environments in the world. The rules for how AI gets access are being written right now. Come write them with us. What you will do: • Own a core product area end-to-end from day one - set direction, define the roadmap, and drive it from discovery to launch and beyond. • Lead discovery calls, POCs, and strategic conversations with Fortune 200 security teams - turning complex enterprise challenges into clear product decisions. • Make the tough prioritization calls: what to build, what to cut, and what to defer - balancing customer impact, competitive position, and engineering capacity. • Work day-to-day alongside UX, Engineering, and leadership throughout the entire process - from early problem framing to shipped product - and influence go-to-market, sales, and customer success on positioning and expansion plays for your area. • Use AI tools day-to-day to move faster - research, specs, prototyping, customer analysis - and bring that same mindset to how the team works. Requirements • 5+ years in product management, ideally with experience in cybersecurity, IAM/PAM, or complex enterprise IT/security products. • Strong technical background - through a degree in Computer Science, Industrial Engineering, or equivalent hands-on experience - with the fluency to debate tradeoffs with engineering and security architects. • Track record of owning a product area and shipping outcomes - not just features - in a fast-moving environment. • Hands-on with customers throughout the product lifecycle: discovery, validation, rollout, and expansion. • Excellent English, written and verbal. • Hands-on user of AI tools in your daily workflow, with a point of view on where they help and where they don't. • Bonus if you've shipped a product in or adjacent to the agentic AI space. Why join us? The Timing The timing couldn't be better. Legacy privileged access management is dead, the market leader was just absorbed, and there's a narrow window to define what replaces it. We're in that window right now. The Culture Our team is small with exceptional people who are actually fun to work with and the distance between your idea and production is short. Plus, we take our coffee seriously. If this sounds like your kind of challenge, apply- even if you don't tick every box.

Description Attackers don't hack- they log in. Almost every major breach starts with a credential that should never have existed. Venice ends standing access for every person, service account, and AI agent across cloud, SaaS, and on-prem. Our agentless platform deploys in minutes, swapping stale access workflows for real-time, just-in-time enforcement. But we're not only building this to stop breaches and replace clunky, legacy PAM setups. We're building it so teams can hand real privileges to AI agents and move faster, not just apply controls that slow everything down. Every company is about to put agents inside its most sensitive systems, and we're making it secure and possible for those agents to be a true part of the workforce. Backed by Index Ventures and IVP, trusted by Fortune 200 security teams, and deployed in some of the most complex enterprise environments in the world. The rules for how AI gets access are being written right now. Come write them with us. What you will do: • Design and build the backend services at the core of the Venice platform - the systems that run our identity security operations in production. • Deliver features end-to-end: from technical design and data modeling through implementation, testing, and production rollout. • Work with a cloud-native microservices architecture - services communicating over message brokers, backed by SQL and NoSQL databases, running on managed cloud infrastructure. • Take part in shaping how the platform evolves - you'll have real autonomy to propose technical solutions, influence architecture decisions, and see your work reach production quickly. Requirements • 4+ years of backend / full stack development experience, preferably in SaaS, cyber security, or cloud-native environments. • Hands-on experience with microservices, message brokers, and both SQL & NoSQL databases. • Self-starter, independent, always seeks to understand the big picture, with the ability to own projects and drive them to completion. • Strong communication skills and fluent English. • Knowledge of cloud infrastructure (AWS, GCP, Azure) and identity management solutions is a plus. Why join us? The Timing The timing couldn't be better. Legacy privileged access management is dead, the market leader was just absorbed, and there's a narrow window to define what replaces it. We're in that window right now. The Culture Our team is small with exceptional people who are actually fun to work with and the distance between your idea and production is short. Plus, we take our coffee seriously. If this sounds like your kind of challenge, apply- even if you don't tick every box.

About Miggo Miggo is building the next generation of application security. We operate a high-scale, data-intensive platform and are looking for a strong DevOps Engineer with SRE capabilities to join a strong, ambitious team. This is an opportunity to have real impact on the company and help build something big from the ground up. The Role You'll own and evolve the infrastructure and reliability of our production platform — a distributed, data-heavy system running on AWS and Kubernetes. You'll work closely with engineering to keep our services fast, reliable, and observable as we scale, while continuously improving our automation, deployment, and operational processes. This role is a fit for someone responsible and hands-on, who wants to contribute to the team effort, take ownership, and keep learning and expanding their capabilities. What You'll Do • Design, build, and operate scalable, resilient infrastructure on AWS and Kubernetes. • Own reliability: define SLOs/SLIs, improve observability, and drive down toil through automation. • Manage and tune our core data and workflow systems — ClickHouse, PostgreSQL, Kafka, and Temporal — for performance and reliability at scale. • Build and maintain CI/CD and GitOps workflows using ArgoCD and GitHub. • Manage infrastructure as code with Terraform. • Lead incident response, run postmortems, and drive systemic improvements. • Establish and improve engineering and operational processes suited to a company operating at scale. • Partner with development teams to make the right reliability, cost, and scalability tradeoffs. What We're Looking For • Strong hands-on experience as a DevOps and/or SRE engineer. • Deep experience with Kubernetes and AWS in production. • Solid experience with Temporal, Kafka, PostgreSQL, and ClickHouse. • Experience with Terraform (IaC) and GitOps tooling such as ArgoCD. • Familiarity with processes and practices for companies operating at scale. • A responsible, ownership-driven mindset with strong collaboration and communication skills. • Eagerness to learn, grow, and contribute to a shared team effort. Our Stack AWS · Kubernetes · ArgoCD · Terraform · ClickHouse · PostgreSQL · Kafka · Temporal · GitHub Why Miggo • Big impact: your work directly shapes how we scale and operate. • Build something meaningful: help lay the foundation for a strong, growing platform. • Strong team: work alongside talented engineers who care about quality and ownership. • Growth: room to expand your skills and take on increasing responsibility.

We’re Miggo — a cybersecurity startup on a mission to stop app-layer breaches before they happen. Founded in 2023 and backed by top-tier cyber VCs, we’re building the world’s first Application Detection & Response (ADR) platform. Why? Because 80% of cyber attacks target the app layer, and current tools just don’t cut it. Miggo brings visibility into how apps actually behave at runtime, spotting risky flows and shutting down threats in real time. If you're excited to shape the future of AI-driven application security from the inside out — join us. At Miggo, we live by four core principles: • We make it customer-focused, putting user needs at the heart of everything we build. • We make it happen, driven by a can-do mindset and obsession with winning. • We make it better, always pushing boundaries, learning fast, and owning our impact. • We make it together, one team that collaborates, laughs, and thrives on diverse perspectives. What you'll do Miggo is looking for a Senior Full Stack Engineer with a backend-oriented mindset to join our growing R&D team. In this role, you’ll be responsible for connecting Miggo’s high-scale data infrastructure with our customer-facing portal—turning complex, runtime telemetry into fast, intuitive, and intelligent user experiences. You’ll work closely with product, design, and Data pipeline and security engineers to build data pipelines, APIs, and integrations that make Miggo’s platform both powerful and delightful to use. This is a hands-on role at the intersection of backend systems, high scale data engineering, and user experience, shaping how massive volumes of runtime data flow through Miggo’s data-driven platform. You’ll Be Great For This Role If You Love To: • Design and implement efficient data pipelines and backend integrations that connect our high-scale data to the user-facing portal. • Build and optimize APIs, data services, and caching layers to ensure fast and reliable data access. • Use data modeling, denormalization, and performance optimization to handle complex queries and large datasets effectively. • Collaborate closely with frontend engineers, product managers, and designers to ensure data flows seamlessly into intuitive UI components. • Contribute to the architecture and scalability of Miggo’s hybrid cloud-native platform. • Write clean, testable, production-ready code in Python, Node.js, TypeScript, and React, while keeping performance and maintainability top of mind. • Stay close to users and product feedback loops — helping translate technical insights into better experiences. • Own end-to-end delivery, from backend design through deployment using CI/CD, Temporal, and Kubernetes. What you have • 7+ years of fullstack experience, with a strong backend focus. • Deep expertise in Python, Node.js, TypeScript, and PostgreSQL (or similar relational DBs). • Proven experience in high-scale data systems, including data ingestion, aggregation, and performance tuning. • Advantage - Experience in ClickHouse DB / OpenSearch • Strong understanding of data modeling, denormalization, and API performance optimization. • Familiarity with React and modern frontend frameworks for connecting and visualizing backend data. • Experience with CI/CD pipelines, Kubernetes, Docker, and cloud-native architectures. • Strong collaboration, communication, and problem-solving skills, you love working across disciplines to deliver impact. • Experience in startups or high-growth environments, where speed, ownership, and quality go hand-in-hand. Why You'll Love Working at Miggo? At Miggo, you’ll help bridge the worlds of massive runtime data and intelligent security experiences. You’ll own systems that make our platform fast, reliable, and insightful, and your work will directly shape how users see and understand their security posture. You’ll join a small, passionate team building from the ground up, where your ideas, architecture, and code will have a visible impact every day.

Product Manager Tel Aviv · Product About Miggo Miggo is closing the patch gap. We created the Application Detection and Response (ADR) category to give security teams runtime visibility into what's actually happening inside their applications — what's reachable, what's exploitable, and what's being attacked right now. And we don't stop at seeing it: when a patch isn't ready, Miggo provides targeted mitigations that shield the application in real time — protecting what's exploitable while the fix catches up. Backed by top-tier investors and trusted by leading enterprise security teams, we're building the category-defining platform for runtime application security. About the role We're looking for a Product Manager to own Miggo's Runtime Domain — the engine that powers vulnerability intelligence, attack detection, sensor capabilities, and our application DNA (appDNA) model. This is the technical core of the product, where security research, runtime telemetry, and product judgment meet. At Miggo, product management is an engineering discipline. You'll be expected to go deep on the technology, hold your ground in technical debate, and ship — not just write specs. This role reports to the Senior Director of Product. What you'll do • Own the roadmap for detection, vulnerability intelligence, and sensor capabilities. Decide what we build, kill, and punt. • Partner with security research daily — turn raw findings, new CVE classes, and exploitation patterns into shippable product. • Write specs engineers respect. Argue about data models and detection quality, not pixels. • Run design partnerships with enterprise security teams. Sit with them, watch them work, come back with conviction. • Run discovery sessions with customers to maximize the value from the Miggo platform. • Use AI tooling as a force multiplier in your own workflow — prototyping, evals, internal agents. Not as a feature you slap on. What we're looking for • Strong technical background — Must. Engineering, security research, or equivalent hands-on technical role. You can read a stack trace, reason about request flow through a service, and have a point of view on why existing AppSec categories under-deliver. • Security research background — Must. Application security, vulnerability research, offensive security, or a technical military intelligence role. Comfortable going deep on CVE classes, exploitation patterns, and runtime signals. • Product experience. Formal PM, founding engineer with product instincts, or a tech lead who shaped what shipped. We care about evidence you delivered things customers actually used — not the title on your last business card. • AI-native operator. You've built something with modern AI tooling — an agent, an eval harness, a workflow — not just used it. • Hands-on by default. Comfortable in fast-paced startup environments where there's no one to hand the work off to. • Clear writer in English. Slack messages, specs, customer notes. Compression matters. Two questions we'd like you to answer Skip the cover letter. Send us: • The most technical thing you've shipped or researched — and what you'd have done differently. • One detection, vulnerability, or AppSec product on the market that you think gets it wrong — and why.

We're Miggo — a cybersecurity startup on a mission to stop app-layer breaches before they happen. Founded in 2023 and backed by top tier cyber VCs, we’re building the world’s first Application Detection & Response (ADR) platform. Why? Because 80% of cyber attacks target the app layer, and current tools just don’t cut it. Miggo brings visibility into how apps actually behave at runtime, spotting risky flows and shutting down threats in real time. If you're excited to shape the future of app security from the inside out — join us. At Miggo, we live by four core principles: We make it customer-focused, putting user needs at the heart of everything we build. We make it happen, driven by a can-do mindset and an obsession with winning. We make it better, always pushing boundaries, learning new things and owning our impact. And most importantly, we make it together — one team, working hard, laughing harder, and thriving on diverse perspectives. What you'll do Miggo is looking for a Security Analyst who loves to deeply analyze CVEs and build effective mitigations. Sitting at the intersection of security research and data analysis, you’ll work closely with research and engineering teams across the company to develop high-impact security controls that keep our customers safe. In this role, you will: • Own the answer to “do our mitigations actually work, and how do we know?” • Build tools to evaluate and improve agentic workflows that generate WAF rules and runtime detections. • Prioritize and analyze newly disclosed CVEs on a daily basis to support effective WAF rule creation. • Analyze coverage levels across various CVE groups, attack vectors, and bug classes. • Conduct data-driven research to optimize automated workflows and recommend next-generation mitigation capabilities. • Perform ad-hoc data analysis to support security research and engineering initiatives. You’re a great fit if you: • Love diving deep into newly disclosed CVEs actively exploited in the wild. • Enjoy analyzing complex security data to uncover actionable insights that drive product and engineering decisions. • Want to define and monitor quality metrics that ensure the efficacy of security products. • Excel at collaborating with engineers to trace data flows, identify anomalies, and refine data pipelines. • Continuously question assumptions, challenge inconsistencies, and hold high standards for both data and security integrity. • Naturally lean on quantitative evidence to prove a point and back up your security hypotheses. What you have • 5+ years of experience as a security researcher. • Proven ability to extract, synthesize, and present clear insights from complex security datasets. • Strong quantitative approach to problem-solving. • Prior experience with Web Application Firewalls (WAF) or runtime detections is a plus. • Hands-on experience or background in Data Analysis / Data Science is a strong advantage. Why You’ll Love Working at Miggo? At Miggo, you’ll sit where security research meets real-world data. Your analysis will directly shape how our mitigations are built, measured, and improved, and how our customers stay protected against the newest threats. You’ll join a small, passionate team building from the ground up, where your ideas, research, and insights will have a visible impact every day.

About Miggo We're Miggo — a cybersecurity startup on a mission to stop app-layer breaches before they happen. Founded in 2023 and backed by top-tier cyber VCs, we're building the world's first Application Detection & Response (ADR) platform. Why? Because 80% of cyber attacks target the app layer, and current tools just don't cut it. Miggo brings visibility into how apps actually behave at runtime, spotting risky flows and shutting down threats in real time. We're closing the patch gap: showing security teams what's reachable, what's exploitable, and what's being attacked right now — and delivering targeted mitigations when a patch isn't ready. At Miggo, we live by four core values: • We make it customer-focused — user needs are our north star. • We make it happen — driven by execution and a can-do mindset. • We make it better — always pushing boundaries and learning fast. • We make it together — one team, thriving on collaboration and diverse perspectives. About the Role Miggo's WAF Copilot takes a freshly disclosed CVE and produces a validated, provider-specific WAF rule — researching the vulnerability, deriving the attack surface, composing the rule, then attacking its own output with an independent bypass judge and a false-positive prober before a human is offered a deploy. As WAF Security Specialist you are the ground truth the Copilot is measured against — the person who can look at a generated rule and say this blocks the PoC but not the four obvious variants, this will trip on legitimate multipart uploads, this is 340 WCUs of nothing because the managed ruleset already catches it, this can't be anchored tightly enough to live in a global Web ACL. You'll be shipping rules for real customers — and you'll do it through our AI harness, and help optimize it. In practice that means driving the harness on live work: feeding it a vulnerability, judging what comes back, tightening the match, and validating it against real exploit traffic until it's something you'd put your name on. Sometimes you'll write the expression yourself — the CVE with no public PoC, the emerging threat you have to reason out of a patch diff, the customer who needs coverage this afternoon. Most of the time you'll be applying expert judgment at every step of a generated rule's life, which is a different and harder skill than authoring from a blank page. Because you'll be the harness's heaviest user, you'll also be the reason it gets better. You'll see exactly where it breaks down — the research step that missed the real sink, the composer that over-broadened, the judge that passed a rule it shouldn't have — and turn that into validations, analyses, and evals that go back into the agent. You'll work side by side with the Copilot & AI team so the agent stops making the mistake, instead of you catching it again next month. That feedback loop is the core of this role. All of it rests on knowing where WAFs actually break: normalization and encoding evasion, parameter pollution, body-inspection size limits, oversize-content handling, rule precedence, and the gap between "the rule matched in staging" and "the rule holds against a motivated attacker." An AI can propose a rule. Knowing whether to trust it is the job. What You'll Do • Create - Produce production WAF rules across providers for high-impact CVEs and customer findings — driving the Copilot harness on most of them, writing the expression yourself on the hard ones (no public PoC, exploitable path reasoned out of a patch diff, urgent customer coverage). Your rules ship, and they set the bar generated rules are measured against. • **Optimize -**Tighten generated rules for real production constraints: WCU and rule-capacity budgets, latency, provider expression limits, and the anchoring required for a rule that fires against all traffic behind a shared Web ACL — not just the vulnerable app. • Validate - Own the adversarial pass. Build exploit variants the PoC doesn't cover, hunt bypasses in our own rules, and run the false-positive side seriously — verifying against how the legitimate client actually behaves on the wire, not against an assumption. • Monitor - Watch deployed rules in production: false-positive signals, hit patterns, coverage drift as managed rulesets shift underneath us, and the log→block promotion decision. Retire what no longer earns its capacity. • Make it reproducible - Turn every finding into a regression test. Build and curate the golden CVE datasets and scoring rubrics that gate whether a new Copilot version ships. • Set the coverage line. Judge which CVEs are genuinely WAF-mitigatable and which aren't, and make the call on what enters and leaves our managed rulesets — with the reasoning written down. What You'll Have • Deep, hands-on WAF expertise across multiple major providers — you've written, tuned, and operated real rules in production on several of: AWS WAFv2, Cloudflare, F5, Imperva, Akamai, Azure, GCP, Fortinet, ModSecurity/CRS. Not "managed a WAF vendor relationship" — written the rules. • You know the caveats cold. Body-inspection limits and oversize handling, text transformations and normalization order, encoding and unicode evasion, parameter pollution, chunked and multipart edge cases, rule precedence and evaluation order, WCU/capacity economics, and how each provider's expression language quietly differs from the others. • Strong security research background — application security, vulnerability research, or offensive security. You can read an advisory, build the PoC, derive the variants nobody published, and explain exactly which request component carries the exploit primitive. • A real feel for the false-positive tradeoff. You've had to defend a blocking decision to someone whose production traffic you broke, and you know why "block everything suspicious" is not a security posture. • Comfortable in code. Enough Python (or similar) to automate replay, build variant generators, and query exploit and traffic data yourself rather than waiting on someone. • Fast under pressure, systematic afterward. You can get a solid rule out the door when a customer needs one today — and your instinct once it ships is to build the check that catches the whole class, not just the instance you fixed. • Advantage: virtual patching / vulnerability-mitigation experience, or time on a WAF vendor's rules or research team. • Advantage: hands-on with LLMs and agentic tooling — you'll be shaping an AI system's output, and it helps to understand how it fails. Why You'll Love This Role You'll do the craft work you're actually good at — writing rules against hard vulnerabilities, under real time pressure, for customers who feel the difference. What's unusual is that here it compounds: every rule you write and every bypass you find makes an AI system permanently better at something an expert used to do by hand, across every customer and every future CVE. You get the individual save and the leverage over the whole fleet. You'll have real authority over what we ship and what we refuse to ship, direct access to the engineers building the agent, and a rare seat at the point where security research and AI actually meet in production. <!-- notionvc: 9520b65f-bc16-4842-b3f2-bfa990a9bdf6 -->

Scope: Hands-on technical lead, no direct reports — influence across Copilot & AI, Pipeline, and Experience About Miggo We're Miggo — a cybersecurity startup on a mission to stop app-layer breaches before they happen. Founded in 2023 and backed by top-tier cyber VCs, we're building the world's first Application Detection & Response (ADR) platform. Why? Because 80% of cyber attacks target the app layer, and current tools just don't cut it. Miggo brings visibility into how apps actually behave at runtime, spotting risky flows and shutting down threats in real time. We're closing the patch gap: showing security teams what's reachable, what's exploitable, and what's being attacked right now — and delivering targeted mitigations when a patch isn't ready. At Miggo, we live by four core values: • We make it customer-focused — user needs are our north star. • We make it happen — driven by execution and a can-do mindset. • We make it better — always pushing boundaries and learning fast. • We make it together — one team, thriving on collaboration and diverse perspectives. About the Role Miggo already runs agents in production. Our WAF Copilot takes a freshly disclosed CVE and turns it into a validated, provider-specific WAF rule — a state-driven agent graph that researches the vulnerability, maps the attack surface, composes the rule, then attacks its own output with an independent bypass judge and a false-positive prober before a human is ever offered a deploy. When a weakness survives, the system downgrades its own recommendation and records what it could not prove. That last part is the thesis of this role. An agent that touches production security must prove it works and declare what it couldn't prove. The security industry is about to be flooded with agentic claims nobody can verify. We intend to be the company that made verification legible — and that starts with holding our own agents to a standard we're willing to publish. We're looking for an AI Tech Lead to own that standard across three surfaces: • The platform - Today each agent flow is close to a bespoke implementation. You'll turn our hard-won patterns into shared components, conventions, and infrastructure so the next agent is a week of work rather than a quarter — with evaluation, observability, and cost control built in rather than bolted on. • Enablement - Miggo's advantage compounds only if the whole company is AI-fluent, not just R&D. You'll raise that fluency everywhere — engineering, research, product, GTM — through tooling, patterns, and teaching. • The voice - You'll publish the methodology: how we benchmark agentic security output, how we model residual risk, what we learned failing. This is a category-defining position and we want it argued in public. This is a hands-on lead role with no direct reports. Your authority comes from the quality of what you build and how clearly you explain it. What You'll Do • Define and build Miggo's agent framework — shared components, orchestration patterns, tool interfaces, and conventions that make "how do I build an agent here" a five-minute answer. • Make evaluation a gate, not an afterthought: trajectory testing, golden datasets, offline replay, and per-dimension scoring that runs in CI. Land the release benchmark so promote / hold / rollback is a number, not a vibe. • Own agent observability end to end — the execution graph, tool invocations, intermediate reasoning, latency per step, and quality drift — including the external Temporal-orchestrated flows that are hardest to introspect today. • Own the economics: provider abstraction, model routing by task complexity, small-model substitution where it holds, cost attribution per flow. Thousands of CVEs through a labeling agent is a budget line, not a detail. • Drive latency and determinism in our production agent flows — tighter loops, early stopping, deterministic state machines over prose-in-prompt orchestration. • Raise the company's AI fluency. Build the internal tooling, skills, and playbooks that let every team — not just R&D — work AI-natively, and teach the judgment for when not to. • Partner with security research, product, and engineering leadership so agent capability and product roadmap actually converge. What You'll Have • You've shipped agentic systems to production — real orchestration, tool use, structured outputs, and the failure modes that only appear at scale. Not "I've called an LLM API." • You've built the evaluation discipline, not just consumed it: trajectory tests, golden datasets, regression gates, offline replay. "It seems better" is not a metric, and you have opinions about what is. • Deep backend and distributed-systems engineering. Strong Python, and comfort with workflow orchestration (Temporal or equivalent), streaming, and cloud-native infrastructure. Agent platforms are systems problems wearing an AI hat. • Fluency across the modern agent stack — LangChain/LangGraph-style frameworks, multi-provider routing, structured output contracts, prompt and context engineering — with the judgment to know which parts are load-bearing and which are fashion. • Security literacy. Enough to reason about whether an agent's security output can be trusted, and to argue with researchers on the merits. You don't need to be a vulnerability researcher. • Influence without authority. You'll change how three teams work with no one reporting to you. Show us where you've done that. • Advantage: experience with AI/LLM security — red-teaming agents, prompt injection, or agentic attack patterns. • Advantage: background in cybersecurity, detection engineering, or WAF/mitigation systems. • Advantage: you've driven AI adoption across a whole company, not only an engineering org. We deliberately don't list a years-of-experience bar. Agent engineering is a few years old as a discipline — we care what you've shipped and what you learned when it broke. Why Miggo? Most "AI lead" roles are a greenfield promise. This one isn't: there are real agents in production, real customers behind them, and a genuinely hard standard already half-built. You'll get the leverage of setting how an entire company builds with AI, the autonomy of a hands-on lead with no layers to negotiate, and a platform to argue the methodology in public while the category is still being defined. We're small enough for your conventions to become how Miggo works — and bold enough to publish them. <!-- notionvc: ed497ce1-f06b-42c5-be56-ef1286b4799f -->

We're Miggo — a cybersecurity startup on a mission to stop app-layer breaches before they happen. Founded in 2023 and backed by top tier cyber VCs, we’re building the world’s first Application Detection & Response (ADR) platform. Why? Because 80% of cyber attacks target the app layer, and current tools just don’t cut it. Miggo brings visibility into how apps actually behave at runtime, spotting risky flows and shutting down threats in real time. If you're excited to shape the future of app security from the inside out — join us. At Miggo, we live by four core principles: We make it customer-focused, putting user needs at the heart of everything we build. We make it happen, driven by a can-do mindset and an obsession with winning. We make it better, always pushing boundaries, learning new things and owning our impact. And most importantly, we make it together — one team, working hard, laughing harder, and thriving on diverse perspectives. What you'll do In this role, you’ll write low-level code that hooks deep into runtimes and OS internals (via eBPF) to capture runtime data with near-zero overhead. Basically, you’re creating the “eyes and ears” inside applications, so we can detect intrusions as they happen. You’ll be pushing the envelope of what eBPF and kernel tech can do: tracing syscalls, monitoring network flows, and intercepting anything attackers might exploit. Your work will help determine exploitability and flag compromises instantly – even for zero-day attacks that nobody has seen before. This is a high-impact, experimental role: part engineer, part hacker – optimizing for performance and reliability while you’re bending the rules of the OS. If you love digging into assembly, performance tuning, and building tools that peer into the guts of running software, come join us. You’ll have the freedom to innovate at the lowest levels of the stack (and we promise, no boring corporate kernel modules here – only the fun stuff!). What you have Do you dream in C and know the Linux kernel like an old friend? We need an eBPF wizard to build the secret sauce of Miggo’s platform – our ultra-lightweight, in-app sensor Why You'll Love Working at Miggo? At Miggo, you’ll help bridge the worlds of massive runtime data and intelligent security experiences. You’ll own systems that make our platform fast, reliable, and insightful, and your work will directly shape how users see and understand their security posture. You’ll join a small, passionate team building from the ground up, where your ideas, architecture, and code will have a visible impact every day.

Description ClickCease is CHEQ's self-serve Digital Acquisition & Marketing Stack Protection platform, protecting SME/SMB sites from invalid traffic across ad platforms (Google Ads, Meta, and more) and user acquisition funnels (forms, tags, and more). As PLG Product Manager, you will own the product end-to-end: roadmap, growth metrics, and the self-serve experience that converts trial users into expanding customers. We're looking for a Product Manager to join our global Product team and take ownership of ClickCease, CHEQ's self-serve PLG platform. Reporting directly to the Chief Product Officer and working closely with the division head, you'll play a key role in shaping the product strategy, influencing business priorities, and driving product decisions across the organization. WHAT YOU'LL DO • Own and drive the ClickCease product roadmap - from ideation and prioritization through delivery, launch, and iteration. • Define and continuously optimize the self-serve funnel: acquisition, conversion, onboarding, retention, and expansion. • Represent the voice of the ICP - conduct market research, user interviews, analyze support trends, and synthesize insights into product decisions. • Define, monitor, and report on key PLG metrics: activation rate, time-to-value, trial conversion, MRR expansion, churn rate, and NPS. • Lead a KPI-based experimentation culture - design A/B tests, analyze results rigorously, and build institutional knowledge from every experiment. • Set pricing and packaging strategy for self-serve subscription tiers, in collaboration with GTM, finance, and leadership. • Monitor the competitive landscape across click fraud prevention, ad verification, and broader ad-tech to identify opportunities and threats. Requirements • 3 - 6 years total product management experience, with a track record of shipping impactful, customer-facing features at a B2B or B2C SaaS company. • PLG / Self-serve product experience [Must Have] - 2+ years as PM on a self-serve SaaS product with a PLG motion (freemium, free trial, or usage-based). You have owned activation and retention funnels, not just features. • Martech / Ad-tech / Advertising platform knowledge [Must Have] - Deep familiarity with Google Ads and/or Meta Ads: campaign structure, conversion tracking, pixel setup, audience targeting, and the day-to-day workflow of a PPC advertiser. You speak the advertiser's language. • Experimentation discipline - Experience designing, running, and correctly interpreting A/B tests. You treat every roadmap decision as a hypothesis waiting to be validated. • SMB market empathy - Deep understanding of small and mid-sized business constraints: budget sensitivity, speed of decision-making, and the outsized value of simplicity in a product. • Strong analytical skills - Comfortable with product analytics tools (Mixpanel or similar) and SQL basics. You question the data before acting on it. • Relevant pricing & packaging experience - You have worked on subscription tier design, trial mechanics, upgrade flows, or usage-based pricing in a self-serve context. NICE TO HAVE • Experience in click fraud prevention, invalid traffic detection, or digital ad verification. • Background in security-adjacent SaaS - bot detection, traffic quality scoring, or ad verification platforms such as DoubleVerify or IAS. • Experience owning products with third-party API integrations - ad platforms, CRMs, analytics tools, and the technical complexity they bring.

Description CHEQ is the Intelligence Standard for the Human-AI Era, trusted by over 15,000 customers worldwide to confidently engage, transact, and thrive in this new era of digital transformation. Powered by award-winning cybersecurity technology, CHEQ offers the only integrated Traffic, Threat, and Identity Intelligence Engine, enabling companies to distinguish between legitimate users and bad actors - human, AI agent, or bot - and deliver granular, context-specific insights in real-time to marketing, commerce, and security platforms. CHEQ is a global company with offices in Tel-Aviv, New York, London and Tokyo. Our R&D organization is global, professional and strives for best practices and high efficiency. About the Role  This is an exciting opportunity for an experienced Senior Software Developer to join our growing R&D team and drive key architecture and development efforts. In this role, you will lead the design, build, and maintenance of scalable, production-ready systems for one of CHEQ’s main core engines and products. Working alongside high-performing engineers, you will take full ownership of features end-to-end: from database architecture and high-performance backend microservices to modern frontend applications. This is a high-impact position for a seasoned engineer looking to influence product direction and solve complex technical challenges in a fast-paced, global environment. Our stack is NodeJS, Typescript , Python and more. microservices on Kubernetes in AWS, with PostgreSQL, MySQL, ClickHouse, Redis, Grafana, and GitLab CI/CD. We embrace AI-assisted development—engineers work daily with tools like Claude Code across coding, code review, and system design. What You’ll Do • Design and develop and maintain new and existing features across the core engine and other products in the team. • Collaborate with Product Managers and Designers to define product specifications and translate them into high-quality technical solutions. • Promote best practices in testing, performance, and security. • Participate in the on-call rotation and support production issue investigations and validations. Requirements • Education: Bachelor's degree in Computer Science, Software Engineering,BA or BsC from a recognized university - A Must • Core Technical Skills: Advanced knowledge in NodeJS and TS - A Must - 7 years of experience and above. Fullstack capabilities in react/vue - An advantage. • Cloud Exposure: Solid foundational understanding of cloud environments (AWS, GCP, or Azure) • Database experience - worked with both relational and non relational databases. Can be SQL, Clickhouse, Snowflake and for noSQK - MongoDB, Couchbase, DocumentDB or DynamoDB. • Adaptability & Drive: Strong autodidact with a proven ability to learn complex concepts quickly and independently • AI-First Mindset & Execution: Throughout your work experience in the last 2 years - you consistently apply an AI-first approach to problem-solving. (not treating AI as a simple autocomplete tool but leverages modern AI tooling, across the entire software development lifecycle) from rapid prototyping and architecture design to automated unit test generation and debugging. • Work Ethic: Highly passionate about technology, results-driven, proactive, and committed to delivering high-quality work. • Collaboration: Excellent team player with strong communication skills and a collaborative mindset

Why Join Sensi.AI Sensi is redefining how care organizations support aging at home by using it's Care Intelligence platform to translate everyday signals into meaningful clinical and operational outcomes. Sensi's platform is deployed across 50 states in leading home-care providers, supporting tens of thousands of seniors aging safely at home. By transforming real-world activity in the home into actionable insights, Sensi enables care teams to detect changes in condition earlier, intervene proactively, and deliver higher-quality care at scale. This is a hybrid role based in Tel-Aviv, Israel About the role We're looking for a Senior Software Engineer, to design and build scalable, production-grade systems powering Sensi's AI-native platform. This is an AI-native engineering role - AI copilots and tools (such as Claude, Cursor, and Copilot) are a core part of how we design, prototype, and ship software. Engineers at Sensi use AI as a force multiplier to move quickly, iterate rapidly, and focus their time on architecture, system design, and complex problem solving. You'll work across multiple services, platform infrastructure, and AI-driven capabilities, owning features end-to-end and helping bring intelligent healthcare products from concept to production. Key Responsibilities AI-Native Development - Design and build scalable systems using AI copilots such as Claude, Cursor, and Copilot as a core part of the workflow. AI-Powered Features - Develop and integrate AI-driven capabilities and pipelines into production systems. End-to-End Ownership - Own features from architecture and development through deployment and monitoring. Cloud Infrastructure - Build and operate scalable cloud-native systems on AWS. Collaboration & Engineering Excellence - Work closely with Product, Data, and AI teams, contribute to architecture decisions, and help raise the technical bar across the team. Requirements 8+ years of professional software engineering experience. Strong backend development experience with Node.js, Python, or similar technologies. Proven experience building and operating scalable SaaS platforms. Experience using AI coding tools (Claude, Cursor, Copilot) to design, prototype, and ship features, leveraging AI-native workflows to accelerate development. Hands-on experience with microservices architecture, APIs, and AWS cloud infrastructure. Experience building or integrating AI/LLM-powered systems or AI-driven product features. Familiarity with modern development practices including CI/CD pipelines, containerized environments, and cloud-native deployment. Strong problem-solving skills, technical judgment, and clear communication. Sensi celebrates diversity and uphold equal opportunity in our hiring practices. Our approach fosters an inclusive environment that sparks innovation and reflects the vibrant communities we serve. All persons shall have the opportunity to be considered for employment without regard to any characteristic protected by applicable federal, state, or local laws and ordinances.

Why Join Sensi.AI Sensi is redefining how care organizations support aging at home by using it's Care Intelligence platform to translate everyday signals into meaningful clinical and operational outcomes. Sensi's platform is deployed across 50 states in leading home-care providers, supporting tens of thousands of seniors aging safely at home. By transforming real-world activity in the home into actionable insights, Sensi enables care teams to detect changes in condition earlier, intervene proactively, and deliver higher-quality care at scale. This is a hybrid role based in Tel-Aviv, Israel. About the role As a Senior Data Scientist, you'll use LLMs to turn the outputs of our existing models into richer, more actionable insights. You'll own the work end to end, from defining the problem to evaluating models and shipping to production, and you'll shape how we measure LLM quality across the team. What you'll do Own the LLM lifecycle end to end, from problem framing and model selection through evaluation, deployment, and production monitoring Lead our LLM evaluation: design benchmarks (synthetic and real-world) that measure how commercial and open-source models perform on our actual use cases, and define what "good enough to ship" means Design and build LLM pipelines that turn the outputs of our audio and NLP models into richer, clinically meaningful insights, with a deep focus on prompt engineering and RAG Run experiments and measure their impact in real-world systems, iterating based on data Processing, cleaning, and preparing data from various sources, including unstructured data Partner with product, engineering, and our clinical team to turn real-world needs into AI solutions, and communicate results to technical and non-technical stakeholders Track the state of the art in NLP, LLMs, and agentic AI, and bring what works into our products Requirements 8+ years of hands-on experience in data science, ML engineering, or applied AI roles Hands-on experience building LLM-based solutions in production, including prompt engineering and RAG architectures Proven experience designing LLM evaluations: building benchmarks and eval suites, and using them to compare models and guide decisions Strong Python skills and experience building data pipelines for structured and unstructured data (text, and ideally audio-derived data) A data-driven mindset: you define success metrics up front and iterate based on results Self-directed, comfortable defining the problem as much as solving it Strong communication skills, with the ability to explain complex results to non-technical stakeholders Nice to Have Experience with time series data and forecasting Experience with cloud platforms (AWS preferred) Experience with fine-tuning LLMs Background in healthcare, clinical, or audio-related domains

Data-AI Lead About Us OurRitual is a fast-growing digital platform reshaping how relationship therapy works. We combine expert-led therapy sessions with AI-powered support to create a blended experience — where clinical depth and intelligent technology weave together into something neither could deliver alone. We call it Continuous Therapy. We've reached product-market fit with strong growth, exceptional engagement, and retention that breaks the category. We're pre-Series A, at the stage where AI moves from feature to foundation — and that shift runs straight through data. Role Overview As Data Lead, you will own how data gets turned into decisions across the company — and lead the shift from traditional BI into AI-driven BI, powered by agents that surface insight in real time. You'll work closely with one data engineer today, with room to grow the team as scope expands. You'll define what the data function looks like when AI is embedded in it, not bolted on — from the underlying infrastructure to the dashboards and agents people actually use. The playbook for AI-native BI is still being written, and you'll write a lot of it. Key Responsibilities Data Strategy & Ownership • Own the vision and roadmap for the data function, including the shift from classic BI to agent-based, AI-driven BI • Set priorities in partnership with senior leadership • Work closely with a data engineer today, with the option to grow the team as the function scales AI-Driven BI & Agents • Drive adoption of AI across data workflows — from automating analyses to agents answering business questions in real time • Own the semantic and metrics layer so every dashboard and every agent reads the same definitions • Build in a git-based workflow: dashboards and queries live in git, edited through PRs, built with agents • Expose our data to agents over MCP so business questions get answered without waiting for a dashboard • Define where AI speeds things up — and where human judgment still has to hold the line Infrastructure & Analytics • Own the data infrastructure: BigQuery, dbt, pipelines, and data reliability • Lead complex analytics work, A/B testing, and impact measurement, hands-on • Define evals and quality metrics for AI features and agents — not just A/B tests on dashboards Cross-functional Collaboration • Partner with product, marketing, finance, operations, and engineering to define analytical needs and turn them into solutions • Represent the data function to the organization — senior-level storytelling with data Skills & Qualifications • 7+ years of experience in data roles, spanning both analytics and infrastructure • Strong analytical foundation — you understand what makes analysis rigorous, not just what makes it automatable, and can use that to build an AI-driven analytics system that's actually trustworthy • Hands-on experience integrating AI into data workflows — building it, not just using it; you've shipped an agent or AI analysis flow that people actually use • Strong SQL skills and experience building scalable data infrastructure • Track record owning data projects independently with stakeholders across the business • Solid grounding in experimentation and statistical methods • Excellent communication and presentation skills at a leadership level • Comfortable being the most senior (and often only) data voice in the room Nice-to-Have Skills • Experience with dbt • Experience with Amplitude • Experience with BigQuery • Experience with git-based BI workflows or tools like Modus • B2C environment experience Why This Role Data teams are about to look very different — not because dashboards disappear, but because people expect answers faster than a weekly report can deliver. This is a rare opportunity to define what AI-native data leadership looks like at a company sitting on a dataset that doesn't exist anywhere else, with real ownership over how the function grows. If you want to build the data function that a category-defining product deserves, this is it.