Resilience Analyst

Why COMO
COMO is building the future of cyber resilience. Our AI-native platform helps organizations understand their ability to recover from cyberattacks, identify critical gaps and dependencies, and prepare for what happens after an attack. Backed by a significant seed round led by General Catalyst, with a live product and paying customers, we're building an exceptional team to define a new category in cybersecurity.
About the Role
We're looking for a Resilience Analyst to own the quality of COMO's dependency map: the picture of what depends on what in each customer's environment, and what will come back after an attack. The map is built from partial signals (cloud configuration, network flow logs, DNS, Kubernetes), so it's always an estimate. You'll analyze real enterprise environments, find what's missing and why, and turn your findings into checks that run automatically across every customer.
What You'll Do

Analyze each customer's environment and measure how well our dependency map covers it: by asset type, by signal source, and by confidence

Investigate anomalies and gaps to root cause: a missing signal, a collector issue, sampling, an unmodeled asset type, or a real architecture quirk

Build baselines and standing checks that flag coverage problems automatically on every new customer environment

Validate a sample of dependencies by hand against the customer's real architecture to keep our numbers honest

Write the coverage section of customer reports: what we see, what we don't, and what it means for their recovery

Work closely with R&D, product, and the proof-of-value team

What We're Looking For

3+ years of experience in network, data, or intelligence analysis

Strong SQL and Python (pandas) skills, comfortable working in notebooks

Experience analyzing partial, sampled, or noisy data: network flows, telemetry, logs, or similar

Analytical rigor: you establish what "normal" looks like before calling anything an anomaly

Basic understanding of cloud environments (AWS or Azure, IAM basics); deep cloud expertise is not required, we'll teach it

Strong written English

Graph analysis, Kubernetes, or infrastructure-as-code exposure - advantage

Backup or disaster recovery familiarity - advantage