Cybersecurity Engineer
Core
Own end-to-end security for two research businesses (SemiAnalysis and Citrini), including paywalled publications, datasets, internal models, and staff security.
Role type
Senior IC cybersecurity engineer (offensive/defensive)
Builds
Automated LLM-driven red team, identity hardening, detection and response systems, disaster recovery playbooks
Domain
Semiconductor and AI industry research, data vendors, investment research
Deliverable
production ML models
Required skills
Red teaming, penetration testing, LLM security (prompt injection, agentic tooling), identity and SaaS security (Google Workspace, Okta, Slack, GitHub, Stripe, AWS/GCP IAM), backup and recovery, Python scripting, incident response, DLP, insider threat defense
Preferred skills
Media/newsletter/paywall security, insider threat/DLP, threat intelligence on financially motivated groups, OSCP/OSEP/GIAC certs, bug bounty track record, hardware/GPU-cluster security
Technologies
LLMs (open-weight), Python, Google Workspace, Okta, Slack, GitHub, Stripe, AWS, GCP
Responsibilities
Run continuous offensive program with automated LLM-driven red team; Harden identity and access with phishing-resistant MFA and least-privilege; Protect product against scraping and leakage; Defend against insider and departure risk; Own people security (phishing simulations, deepfake controls); Secure engineering surface; Build detection and response; Own disaster recovery and business continuity; Report quarterly on risk
Seniority
Senior, hands-on IC
