×
Vega Security
AI Native Cybersecurity
Last verified August 15, 2026 · Updated daily
What Vega Security is building
Every major enterprise security team runs a SIEM (Security Information and Event Management) platform - Splunk being the dominant one, which Cisco acquired in 2024 for $28 billion. SIEM requires pulling all your security-relevant data into a centralised lake before you can analyse it for threats. For a bank with petabytes of transaction logs spread across 40 cloud environments, that data centralisation costs tens of millions of dollars a year and takes 18-24 months to set up properly. This is a fundamental 'Data Gravity' crisis facing modern enterprise security. That assumption is now structurally broken, for three reasons happening simultaneously. First, the volume of security-relevant data has exploded - a mid-sized enterprise today generates terabytes of logs per day across cloud services, SaaS applications, data lakes, and on-premise infrastructure. Ingesting all of it into a centralised SIEM costs, at Splunk's pricing model, millions of dollars annually just in data ingestion fees before a single analyst touches it. Second, regulated industries across banking, healthcare, insurance, critical infrastructure, increasingly cannot move data at all. GDPR, HIPAA, financial data sovereignty laws, and sector-specific regulations create hard legal constraints on where data can physically reside. A bank with transaction logs in a Frankfurt data centre cannot pipe them to a US-based SIEM without triggering regulatory exposure. Third, cloud-native architectures have fragmented data across dozens of environments simultaneously across AWS S3 buckets, Snowflake warehouses, Databricks lakehouses, GCP BigQuery instances, in ways that were never designed to feed a centralised collection point. Vega's architecture inverts this. Instead of moving the data to where the analysis happens, they bring the analysis to where the data lives - directly in the cloud services, data lakes, and storage systems without ever extracting or centralising the underlying data. They call it 'operational silence': instead of generating more alerts for already-overwhelmed SOC teams, they surface distilled, investigated threats, with context. Shay Sandler's phrase for what they sell: 'We are a platform that investigates the threat in your own environment and distills the truth.'
Why this matters
The SIEM market is broken and everyone knows it. Splunk customers routinely complain about cost (priced by data ingestion volume, costs explode as companies grow), complexity (multi-year implementation projects), and false positives (SOC teams drowning in alerts they can't triage). The alert fatigue problem alone justifies an architectural rethink. The average enterprise SOC team receives between 1,000 and 10,000 security alerts per day. Analyst capacity to investigate those alerts is roughly 40 per analyst per day. The math produces a triage backlog that is structurally impossible to clear, which means the current SIEM model, by design, produces more noise than any human team can process. The response across the industry has been to add more analysts, which is expensive, or to raise alert thresholds, which means missing real threats. Vega's 'operational silence' approach attacks the problem differently: instead of generating alerts for human triage, the platform investigates autonomously and surfaces only confirmed, contextualised findings. The output is not a queue of alerts. It is a set of answers. The regulated industry wedge is the most defensible part of Vega's position. A bank with petabytes of transaction data spread across multiple jurisdictions cannot use a centralised SIEM regardless of cost or capability, the regulatory prohibition is absolute. That customer segment, which includes some of the largest security budgets on earth, has been chronically underserved by every major SIEM vendor because the vendors' architectures physically cannot serve them. Vega's in-place detection model is the first architecture that is natively compliant with data sovereignty requirements - not through workarounds or regional deployments, but by design. Instacart, Fortune 500 financial institutions, and major healthcare systems are already live customers. The AI dimension adds a further layer. As AI workloads generate their own security surface area, model weights being exfiltrated, prompt injection attacks, training data poisoning, inference endpoint abuse, the data volumes and data locations involved are even more distributed and even less amenable to centralisation. Vega's architecture scales naturally to AI-native threat detection in a way that centralised SIEMs cannot, because the data that needs protecting increasingly cannot leave the environment where it was created. The threat detection market for AI infrastructure alone is projected to reach $20B+ by 2030. Vega is positioned at the intersection of that emerging market and the existing $6B SIEM replacement cycle, which is a more valuable position than either one alone.
Open roles at Vega Security
4 positions we're tracking. Roles are re-checked daily and removed when filled.
Security/Detection Engineers
First seen 4 months ago
Enterprise Sales (US expansion)
First seen 4 months ago
Solutions/Sales Engineers
First seen 4 months ago
Backend Engineers (Go/Python)
First seen 4 months ago
Hiring outlook
21 open roles, Fortune 500 contracts, expanding US
Working at Vega Security
Since , Vega Security has built AI Native Cybersecurity. The team is now people. Working at a AI company at this stage means opportunity to shape your role based on the company stage.
Most openings are based out of Tel Aviv + NYC.
Frequently asked questions
How many jobs does Vega Security have open?
4 open roles at Vega Security, last checked February 2025.
Does Vega Security hire remotely?
No remote roles right now — all positions are in Tel Aviv + NYC.
What roles is Vega Security hiring for?
Vega Security is hiring across Engineering, Sales. The most recent opening is Security/Detection Engineers.
How do I apply for a job at Vega Security?
Use the apply links above, or check our guide to getting hired at Vega Security.
Where is Vega Security based?
Vega Security is headquartered in Tel Aviv + NYC.
Get Vega Security roles before they're posted
We track AI companies like Vega Security daily and surface roles before they reach the job boards. Fewer applicants, faster replies, real hiring managers.
Get early access →