Run a continuous offensive program against SemiAnalysis and Citrini: build an automated, LLM‑driven red team that probes web properties, paywall, APIs, email, cloud accounts and staff around the clock
Harden identity and access: enforce phishing‑resistant MFA, least‑privilege admin on Google Workspace, Slack, GitHub, Stripe, SubStack and cloud, and kill shared credentials
Protect the product: secure the paywall and subscriber data, detect credential sharing and scraping of paid content, watermark or fingerprint distributed reports, and monitor for leaked reports on Telegram, Discord, forums and dark‑web markets
Defend against insider and departure risk: DLP and egress controls on models, datasets and code; device management; a clean offboarding playbook; evidence preservation that stands up in trade‑secret litigation
Own people security: targeted phishing and vishing simulations against staff and founders, executive impersonation controls, and short practical training
Requirements
Nice to have: defending media or newsletter businesses
Nice to have: insider‑threat or DLP work
Nice to have: trade‑secret or IP litigation evidence
Nice to have: financially motivated threat intelligence
