Why COMO
COMO is building the future of cyber resilience. Our AI-native platform helps organizations understand their ability to recover from cyberattacks, identify critical gaps and dependencies, and prepare for what happens after an attack. Backed by a significant seed round led by General Catalyst, with a live product and paying customers, we're building an exceptional team to define a new category in cybersecurity.
About the Role
We're looking for a Resilience Analyst to own the quality of COMO's dependency map: the picture of what depends on what in each customer's environment, and what will come back after an attack. The map is built from partial signals (cloud configuration, network flow logs, DNS, Kubernetes), so it's always an estimate. You'll analyze real enterprise environments, find what's missing and why, and turn your findings into checks that run automatically across every customer.
What You'll Do
Analyze each customer's environment and measure how well our dependency map covers it: by asset type, by signal source, and by confidence
Investigate anomalies and gaps to root cause: a missing signal, a collector issue, sampling, an unmodeled asset type, or a real architecture quirk
Build baselines and standing checks that flag coverage problems automatically on every new customer environment
Validate a sample of dependencies by hand against the customer's real architecture to keep our numbers honest
Write the coverage section of customer reports: what we see, what we don't, and what it means for their recovery
Work closely with R&D, product, and the proof-of-value team
What We're Looking For
3+ years of experience in network, data, or intelligence analysis
Strong SQL and Python (pandas) skills, comfortable working in notebooks
Experience analyzing partial, sampled, or noisy data: network flows, telemetry, logs, or similar
Analytical rigor: you establish what "normal" looks like before calling anything an anomaly
Basic understanding of cloud environments (AWS or Azure, IAM basics); deep cloud expertise is not required, we'll teach it
Strong written English
Graph analysis, Kubernetes, or infrastructure-as-code exposure - advantage
Backup or disaster recovery familiarity - advantage