Software Engineer and Security Researcher

CommIT is hiring for a role focused on building a top-tier cybersecurity product in the CSPM/CNAPP domain, extending to cloud posture, identity, attack paths, prioritization, detection, and related areas.

• 5+ years of experience as a software engineer designing systems and writing production code with end-to-end delivery ownership.
• Strong cybersecurity foundation, understanding threats, controls, identity, cloud risk, and customer-relevant findings.
• Hands-on experience developing with AI and AI-driven development tools.
• Practical experience using coding agents, LLM tools, or in-IDE AI assistants as core parts of development.
• Experience with at least one major cloud platform: preferably AWS, or Azure or GCP.
• Ability to operate at a high pace with small batches, fast iteration, scope management, and calmness under pressure.
• Strong communication skills to explain engineering and security tradeoffs to technical and non-technical stakeholders.

Nice to Have:

• Experience building CSPM/CNAPP products, cloud security detection/analytics pipelines, or other top-tier security products.
• Experience developing or fine-tuning AI-powered developer workflows such as custom agents, pipelines, evaluations, internal AI tooling, and prompt frameworks.
• Familiarity with cloud telemetry/log sources and correlation of security signals.
• Infrastructure-as-Code experience, e.g., Terraform, and cloud-native development.
• Prior security research in vulnerability research, threat research, or detection engineering.

• Design, build, and ship product features end-to-end: from security research to architecture and production code to release.
• Apply cybersecurity expertise to every feature decision, including detection, risk modeling, actionable findings, and noise reduction.
• Own cloud security capabilities across CSPM and beyond, covering posture, identity, attack paths, severity/prioritization, detections, and emerging platform areas.
• Drive AI into the development loop using coding agents and LLM tools for design, prototyping, building, debugging, reviewing, and documentation.
• Move fast with judgment by making tradeoffs explicit, shipping iteratively, and learning from customer feedback.
• Collaborate closely with product, research, and engineering peers through clear written specifications, communication, and customer-facing rationale.