Security Analyst Team Lead

Legit Security is looking for an experienced security leader to build and lead our Security Analyst team — the people who turn the latest threats, frameworks, and data into detections, fixes, content, and insights inside our product and for the industry 

About Us 

We are a well-funded cybersecurity startup backed by top-tier VCs. Our mission is to solve some of the most challenging problems in software security – how to make organizations build with AI fast, and stay secure, especially against the rising threats from supply chain attacks. Our solution provides full management from AI-generated code to deployment – helping customers analyze their software risk, fix it with agents and secure code during generation. 

We are in a fast-growing new space and work hard to become the leader.  

What you'll own 

• Own the business of security analysis in Legit – owning the quality and content of our risk detection, threat intelligence feed and security-matter-expertise. 
• Manage the team — set the bar for the work, coach analysts day-to-day, and own their development and performance. 
• Own the team's roadmap together with engineering, product and marketing: prioritize and bring initiatives to promote your business. 
• Be the focal point to lead Legit's response to global incidents in supply chain and application security — decide how the team reacts, what ships into the product, and what we publish externally. 
• Own the quality and voice of the team's security content — guides, remediation steps, in-product insights, blogs and social publications — and represent Legit as a thought leader in the space. 
• Partner with customers and field teams on high-stakes analyses of customer data and environments; present findings to security leaders and use those engagements to sharpen the team's focus. 

What you’ll bring 

• Has experience leading a security research, detection or analyst team 
• Has deep hands-on background in cybersecurity or application security or supply chain security or a closely related domain. 
• Has some development experience (can be AI-based), and is comfortable with modern development workflows. 
• Knows how to balance speed and rigor — and how to make that trade-off legible to a team under incident pressure. 
• Writing and speaking skills in English enough to represent Legit publicly: customer executives, webcasts, blogs and social platforms. 

If you think you are "Legit”, let's talk