SubImage is a YC-backed cybersecurity startup building an open-core "security graph" that maps infrastructure the way an attacker would, so security teams at scale-ups and enterprises can find and fix vulnerabilities. Its core technology is Cartography, an open-source tool created at Lyft and now a CNCF project used by over 70 companies including several Fortune 100 firms. A compact founding team of four in San Francisco (founders from Lyft, Anthropic, NSA) is hiring a founding engineer to help scale the product and meet customer demand; compensation is $170K-$230K plus 0.50%-1.00% equity, and the role requires in-office presence five days a week and US work authorization.
The engineering work centers on hard systems and security problems: triaging and contextualizing vulnerabilities (internet exposure, attack paths, reachability, compensating controls, sensitive-data access), building near-real-time self-updating environment graphs, safe AI agents with precise context, owner attribution heuristics, compliance state tracking, and "time travel" to replay attacks. The stack includes Cartography for ingestion, Neo4j, Python backend with FastAPI, Svelte frontend with a custom WebGL graph renderer, an MCP server to expose the graph to AI agents, and Terraform for IaC. Requirements: 3+ years at high-growth companies, strong distributed systems/cloud experience, ownership mindset, and systems-first thinking. Benefits include health/vision/dental, 401k match, gym, lunches, and unlimited PTO; interview includes a technical screen and a paid day working with the team.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A researcher at a Russian plague laboratory in Siberia died from an unknown infection following a laboratory accident. Russian authorities have implemented special measures, but the exact nature of the released pathogen remains unclear. (scrippsnews.com)
European Commission staff dislike the EU's 'sovereign' backup platform Element Pro, calling it ineffective and poorly designed. The EC implemented it to reduce reliance on US tech, but staff skepticism remains high due to usability issues and concerns over data security. (gizmodo.com)
A researcher at a Russian plague laboratory has died from an unidentified infection. Authorities have not disclosed details about the cause of death or the infection. (cnn.com)
AI systems can trigger nuclear conflicts by amplifying human cognitive blind spots and overwhelming decision-makers during crises. Superintelligence is not necessary for AI to escalate nuclear risks, as current systems influence human judgment and actions. (thebulletin.org)
Site-blocking bills like the DEFEND IP Act aim to protect intellectual property but instead promote censorship and overblocking. These laws threaten the open web by creating systems that can be misused to restrict access to websites indiscriminately. (eff.org)
Google has suspended part of its open-source bug bounty program due to an influx of invalid AI-related submissions. The program's vulnerability reporting ended on October 1. (tomshardware.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.