Principal Product Architect

What You’ll Do at Cyble

• Define the product and technical direction for Cyble Vision.
• Own the platform roadmap, technical requirements, architecture priorities, and customer workflows.
• Drive the complete intelligence lifecycle:

Collection → Ingestion → Normalization → Enrichment → Entity Resolution → Correlation → Knowledge Graph → Search → AI Reasoning → APIs → Customer Action

• Work directly with engineering teams on data pipelines, search architecture, graph models, APIs, platform scalability, performance, reliability, and observability.
• Partner with Cyble’s Threat Research teams to improve intelligence coverage, quality, freshness, provenance, confidence, and correlation.
• Drive the integration of BlazeAI across threat research, investigations, threat hunting, intelligence analysis, reporting, and analyst workflows.
• Define AI-native capabilities using LLMs, RAG, Graph RAG, knowledge graphs, tool-calling, memory, and agentic workflows.
• Own Vision’s API and integration strategy across SIEM, SOAR, EDR/XDR, STIX/TAXII, and the broader cybersecurity ecosystem.
• Work directly with CISOs, threat intelligence teams, SOC analysts, threat hunters, and strategic customers to translate complex operational requirements into platform capabilities.
• Continuously assess competitive platforms and ensure Vision has clear technical, intelligence, data, and AI differentiation.

What Success Looks Like

• Vision becomes materially faster, more reliable, easier to use, and more differentiated.
• Intelligence quality, freshness, coverage, and correlation continuously improve.
• BlazeAI becomes deeply embedded in customer investigations and intelligence workflows.
• APIs and integrations make Vision operationally valuable within customers’ existing security environments.
• Engineering and research teams have clear technical product direction and measurable outcomes.
• Customers derive faster and more actionable intelligence from the platform.

This role is designed for someone who wants to personally shape and build a category-defining threat intelligence platform, without moving into a traditional people-management role.

If you like working in an inclusive environment, you want to advance your career quickly, and your opinion is valued, look no further than Cyble, Inc. We are young, hungry, and ready to impact the cyber security landscape!

Cyble, Inc. takes into consideration an individual’s skillset, experience and location in making final salary determination.

• 10+ years of experience across cybersecurity products, threat intelligence, security data platforms, or security operations.
• Deep understanding of threat actors, campaigns, malware, vulnerabilities, IOCs, TTPs, MITRE ATT&CK, STIX/TAXII, YARA, and Sigma.
• Strong technical knowledge of distributed systems, large-scale data pipelines, Kafka, OpenSearch/Elasticsearch, APIs, graph databases, Kubernetes, cloud infrastructure, and multi-tenant platforms.
• Strong understanding of knowledge graphs, entity resolution, correlation, semantic search, embeddings, vector databases, LLMs, RAG, Graph RAG, and AI agents.
• Ability to review architectures, data models, schemas, APIs, search strategies, and system trade-offs with senior engineers.
• Proven experience taking complex technical products from problem definition through architecture, production delivery, customer adoption, and continuous improvement.
• Strong product judgment, customer empathy, and the ability to make clear prioritization decisions in a fast-moving environment.

Cyble is an AI-native cybersecurity company helping enterprises and governments identify, understand, and respond to cyber threats. Our platform is powered by BlazeAI, Cyble’s reasoning engine, which enables intelligent automation across threat intelligence, exposure management, detection, and response.

Cyble Vision is our enterprise threat intelligence platform, bringing together external threat intelligence, dark web intelligence, malware and vulnerability intelligence, threat actor tracking, AI-led investigations, and security ecosystem integrations.