Security Analyst

We're Miggo — a cybersecurity startup on a mission to stop app-layer breaches before they happen. Founded in 2023 and backed by top tier cyber VCs, we’re building the world’s first Application Detection & Response (ADR) platform. Why? Because 80% of cyber attacks target the app layer, and current tools just don’t cut it. Miggo brings visibility into how apps actually behave at runtime, spotting risky flows and shutting down threats in real time. If you're excited to shape the future of app security from the inside out — join us.

At Miggo, we live by four core principles:

We make it customer-focused, putting user needs at the heart of everything we build. We make it happen, driven by a can-do mindset and an obsession with winning. We make it better, always pushing boundaries, learning new things and owning our impact. And most importantly, we make it together — one team, working hard, laughing harder, and thriving on diverse perspectives.

Miggo is looking for a Security Analyst who loves to deeply analyze CVEs and build effective mitigations. Sitting at the intersection of security research and data analysis, you’ll work closely with research and engineering teams across the company to develop high-impact security controls that keep our customers safe.

• Own the answer to “do our mitigations actually work, and how do we know?”
• Build tools to evaluate and improve agentic workflows that generate WAF rules and runtime detections.
• Prioritize and analyze newly disclosed CVEs on a daily basis to support effective WAF rule creation.
• Analyze coverage levels across various CVE groups, attack vectors, and bug classes.
• Conduct data-driven research to optimize automated workflows and recommend next-generation mitigation capabilities.
• Perform ad-hoc data analysis to support security research and engineering initiatives.

At Miggo, you’ll sit where security research meets real-world data. Your analysis will directly shape how our mitigations are built, measured, and improved, and how our customers stay protected against the newest threats.

You’ll join a small, passionate team building from the ground up, where your ideas, research, and insights will have a visible impact every day.

• Love diving deep into newly disclosed CVEs actively exploited in the wild.
• Enjoy analyzing complex security data to uncover actionable insights that drive product and engineering decisions.
• Want to define and monitor quality metrics that ensure the efficacy of security products.
• Excel at collaborating with engineers to trace data flows, identify anomalies, and refine data pipelines.
• Continuously question assumptions, challenge inconsistencies, and hold high standards for both data and security integrity.
• Naturally lean on quantitative evidence to prove a point and back up your security hypotheses.
• 5+ years of experience as a security researcher.
• Proven ability to extract, synthesize, and present clear insights from complex security datasets.
• Strong quantitative approach to problem-solving.
• Prior experience with Web Application Firewalls (WAF) or runtime detections is a plus.
• Hands-on experience or background in Data Analysis / Data Science is a strong advantage.