Cybersecurity Engineer

SemiAnalysis•Chicago, IL

12h

About The Position

SemiAnalysis is hiring its first dedicated Cybersecurity Engineer to own security across SemiAnalysis and Citrini. This is a hands-on, one-person security function reporting to leadership, with budget for tooling and outside specialists as needed. The role covers the businesses’ paywalled publications and datasets, subscriber and billing information, internal models and code, and employee security. The engineer will continuously test the organizations’ attack surface and remediate identified issues. The position also includes opportunities to grow the security function as the businesses expand, shape product security for data products, APIs and open-source work, contribute security analysis and cybersecurity articles, and present risk directly to founders and the board. It offers a potential path to Head of Security.

Requirements

At least 2 years of security experience with practical defensive or offensive work in red teaming, blue teaming, penetration testing, bug bounty or adversary simulation, including findings the candidate can explain.
Hands-on experience with LLM security tooling, including building or running agentic attack or reconnaissance pipelines, understanding prompt injection and model abuse, and running open-weight models.
Strong identity and SaaS security experience with Google Workspace, Okta or similar, Slack, GitHub, Stripe, and AWS or GCP cloud IAM.
Practical backup and recovery experience, including restoring systems after an incident or outage.
Ability to scope, build, operate and explain a security function independently, and recognize when to bring in outside help.
Ability to read and write code, with Python at minimum, to automate security work and review company code.
Clear writing skills for incident reports and roadmaps.

Nice To Haves

Experience securing a media, newsletter, data vendor or investment research business, including paywall abuse, content leakage or scraping.
Insider-threat or DLP experience, or involvement in trade-secret or intellectual-property litigation evidence.
Threat intelligence experience involving financially motivated groups such as ShinyHunters, Scattered Spider and Silent Ransom Group, and dark-web monitoring.
OSCP, OSEP or GIAC offensive certifications, or a track record on HackerOne or Bugcrowd.
Familiarity with the semiconductor and AI infrastructure industry, or with quant and hedge fund security expectations.
Experience with hardware or GPU-cluster environments.

Responsibilities

Run a continuous offensive security program across SemiAnalysis and Citrini, building an automated, LLM-driven red team to probe web properties, the paywall, APIs, email, cloud accounts and staff, and triage its findings.
Harden identity and access by enforcing phishing-resistant hardware-key MFA, least-privilege administration across key SaaS and cloud accounts, and eliminating shared credentials.
Protect the paywall and subscriber data; detect credential sharing and scraping of paid content; watermark or fingerprint distributed reports; and monitor for leaked reports across online communities and dark-web markets.
Manage insider and departure risk through DLP and egress controls for models, datasets and code, device management, offboarding procedures, and preservation of evidence suitable for trade-secret litigation.
Run targeted phishing and vishing simulations, establish controls against executive impersonation, and provide practical security training.
Secure engineering systems through GitHub organization settings, secrets scanning, dependency and CI hygiene, and cloud configuration reviews.
Centralize SaaS and cloud logs, build alerts, handle incident response, and manage vendors for MDR, penetration testing, forensics and cyber insurance.
Own disaster recovery and business continuity: define recovery objectives, implement tested offline-capable backups, create recovery playbooks for ransomware, account takeover and SaaS or cloud outages, and conduct at least one restore and tabletop exercise annually.
Report risk to leadership quarterly with a prioritized roadmap and budget.
As the business grows, build and lead a small security team across both brands and own the budget.
Help shape secure development of data products, APIs and open-source work, including InferenceX.
Contribute security analysis and cybersecurity articles to SemiAnalysis publications.
Work with founders and present risk to the board.