We are
48% of breaches now come through vendors. Yet most companies still manage vendor risk through certifications and questionnaires, essentially trusting what vendors say about their security. Lema changes that. We analyze every vendor like a vulnerability researcher would: how could an attacker use this vendor to get in, and what could they reach?
We’re turning vendor risk from a paperwork exercise into a true security discipline. Backed by Team8, Salesforce Ventures, and F2, and already trusted by leading enterprises, Lema is entering hypergrowth and tripling our team to build a category-defining platform.
We move fast, with radical ownership, transparency, and high impact.
More about Lema:
- Lema.ai website
- Business Insider - Cybersecurity startup Lema has come out of stealth to raise $24 million
- Team8 - Why We Invested In Lema
About the Role
We're looking for a security researcher with 5+ years of experience to discover new ways vendors put their customers at risk. You'll own research end to end, from the first hypothesis to a shipped capability, and help decide where Lema looks next.
What You'll Do
- Discover new ways attackers can use vendors to get in, and prove or kill each idea with real data.
- Decide which security tools and data sources we should integrate next, and why.
- Shape the logic and knowledge behind our AI risk agents.
- Build your own tools when the one you need doesn't exist.
- Partner with engineering to turn validated research into product.
- Work alongside the best security researchers in the industry.
What You Bring
- 4+ years of hands-on experience in security research, threat intelligence, or offensive security.
- Original research to show: vulnerabilities, techniques, tools, or findings.
- A strong grasp of core security domains, including identity, cloud, SaaS, endpoint, and network, and how they connect.
- Rigor. You prove a finding before you claim it, and you read AI output adversarially.
- Independence. You take a fuzzy question and turn it into a result without needing each step defined.
- A track record of research that became a product, a detection, or a published finding.
Why Join Lema AI
- Impact: Build a category-defining platform that safeguards how modern businesses operate.
- Ownership: Join a culture that gives you full context, autonomy, and trust to drive outcomes.
- Compensation & Benefits: Competitive salary, equity package, and additional perks
- Velocity: Work with exceptional peers in a high-energy, low-bureaucracy environment.
- Growth: Shape a company that’s scaling rapidly, backed by Tier 1 investors and visionary customers.
Skills Required
- 4+ years of hands-on experience in security research, threat intelligence, or offensive security
- Original research demonstrating vulnerabilities, techniques, tools, or findings
- Strong understanding of identity, cloud, SaaS, endpoint, and network security domains and their relationships
- Ability to rigorously prove findings and evaluate AI output adversarially
- Ability to independently turn ambiguous questions into results
- Track record of research becoming a product, detection, or published finding
What We Do
Lema AI is a venture-backed B2B SaaS company building an AI-powered platform for third-party risk management (TPRM) and cyber resilience. Its agentic technology helps enterprises move beyond reactive compliance by analyzing vendor information, uncovering material risks that standard checklists miss, and delivering actionable plans for risk mitigation. The company aims to help modern businesses prevent failures caused by third-party incidents.
