Reporting to: Engineering Manager  
Location: Tel Aviv, Israel 
Capacity: Fulltime 
 
Company Overview: Tonic Security, the contextualized security company, is cybersecurity startup that is reshaping Exposure and Vulnerability Management by providing the context security teams need to accelerate prioritization and remediation of vulnerabilities and threats. Powered by an AI Data Fabric, Tonic extracts meaningful and actionable context from unstructured organizational knowledge and threat intelligence, empowering security teams with superior visibility, dramatic reduction in false positives, and remediation of findings that actually matter. Leading organizations, including Fortune 500 companies rely on Tonic to slash remediation time and reduce risk to key business processes. 
 
Our team is composed of world-class engineers, researchers, and industry veterans committed to redefining cybersecurity with agentic AI, and the latest cyber technologies. 
 
Position Overview: As a Data Engineer, you will design and build the data ingestion and transformation layer of our cybersecurity platform. You will work at the intersection of data engineering, semantic modeling, and applied AI, building intelligent pipelines that acquire data from diverse enterprise systems, map it to our security ontology, and enrich it using production-grade LLMs to extract actionable insights. This role combines deep technical execution with the opportunity to shape how raw security data becomes structured, contextualized knowledge. 

‍

Key Responsibilities:

  • Multi-Source Data Acquisition - Build and maintain connectors for security tools, ITSM systems, knowledge platforms, collaboration tools and more. Develop robust API integrations with various authentication methods, handle rate limiting and pagination, and create reusable connector frameworks.
  • Ontology Mapping & Transformation - Map diverse source schemas to our unified security ontology, build transformation logic that preserves semantic meaning, and manage schema evolution.
  • LLM-Powered Data Enrichment - Implement production LLM pipelines augment and classify data for advanced analytics and remediation, and optimize LLM usage for cost and latency.
  • Data Pipeline Engineering - Design scalable ingestion pipelines handling millions of records, implement incremental sync strategies and deduplication, and optimize for large-scale datasets.

Qualifications -Must Have:

  • 2+ years of backend development or data engineering experience.
  • SQL proficiency - complex queries, optimization, database design.
  • API integration experience - REST APIs, authentication, error handling.

‍

Nice to Have:

  • Understanding of cybersecurity domain - vulnerabilities, assets, findings, risk (huge plus).
  • Experience with security tool APIs (CrowdStrike, Tenable, Wiz, ServiceNow, etc.).
  • Knowledge of Active Directory and identity systems.
  • LLM/NLP experience - practical experience using LLMs for data extraction or enrichment.
  • Familiarity with columnar databases.
  • Familiarity with prompt engineering best practices.

‍

What Makes This Role Unique:

  • Work with experienced industry veterans: Learn from engineers with 20+ years of experience - data is the backbone of the entire enterprise.
  • Production LLMs: LLMs aren't just dev tools—they're core to our data pipeline.
  • Semantic Complexity: Building an ontology-driven platform, not just moving data.  
  • Diverse Sources: Work with 100+ different enterprise systems.

‍

Why Join Us?

  • Join an innovative fast-growing company at the forefront of cybersecurity.
  • Be a key influencer, shaping the direction of the product.  
  • Collaborate with a passionate and experienced team of professionals.
  • Benefit by being part of a positive, all-inclusive company culture.
  • Enjoy a flexible and state-of-the-art work environment.

‍

Interested?

Send your resume and a short note on why you’re interested about this role to: jobs@tonicsecurity.com

‍

‍‍
 

‍

‍