Job Description

Legit Security is looking for an experienced security leader to build and lead our Security Analyst team — the people who turn the latest threats, frameworks, and data into detections, fixes, content, and insights inside our product and for the industry

About Us

We are a well-funded cybersecurity startup backed by top-tier VCs. Our mission is to solve some of the most challenging problems in software security – how to make organizations build with AI fast, and stay secure, especially against the rising threats from supply chain attacks. Our solution provides full management from AI-generated code to deployment – helping customers analyze their software risk, fix it with agents and secure code during generation.

We are in a fast-growing new space and work hard to become the leader.

What you'll own

• Own the business of security analysis in Legit – owning the quality and content of our risk detection, threat intelligence feed and security-matter-expertise.
• Manage the team — set the bar for the work, coach analysts day-to-day, and own their development and performance.
• Own the team's roadmap together with engineering, product and marketing: prioritize and bring initiatives to promote your business.
• Be the focal point to lead Legit's response to global incidents in supply chain and application security — decide how the team reacts, what ships into the product, and what we publish externally.
• Own the quality and voice of the team's security content — guides, remediation steps, in-product insights, blogs and social publications — and represent Legit as a thought leader in the space.
• Partner with customers and field teams on high-stakes analyses of customer data and environments; present findings to security leaders and use those engagements to sharpen the team's focus.

Requirements

What you’ll bring

• Has experience leading a security research, detection or analyst team
• Has deep hands-on background in cybersecurity or application security or supply chain security or a closely related domain.
• Has some development experience (can be AI-based), and is comfortable with modern development workflows.
• Knows how to balance speed and rigor — and how to make that trade-off legible to a team under incident pressure.
• Writing and speaking skills in English enough to represent Legit publicly: customer executives, webcasts, blogs and social platforms.

If you think you are "Legit”, let's talk