Calo Inc.

Business Analyst

• Own a business or product domain end-to-end, from problem definition to impact measurement
• Structure ambiguous business questions into clear analytical frameworks
• Ensure reliable instrumentation, working closely with product teams to validate event tracking and metrics definitions
• Own and validate core KPIs, ensuring data quality, consistency, and trust
• Design and maintain scalable dashboards and metrics frameworks that support both strategic and operational decisions
• Translate complex analyses into clear, actionable business recommendations with measurable outcomes
• Partner with stakeholders as a trusted thought partner, not just a data provider
• Leverage AI tools to debug queries, automate analysis, and accelerate insights
• Mentor junior analysts by reviewing work, sharing best practices, and raising analytical standards across the team
• Contribute to improving analytics processes, documentation, and ways of working

Senior Business Analyst

Security Engineer

• Own and drive the security roadmap by identifying high-risk areas, prioritizing work, and delivering measurable improvements
• Work closely with Platform, Product Engineering, Data, and Leadership to embed security into everyday delivery
• Benchmark systems against relevant standards (e.g., OWASP Top 10 / ASVS, CIS where applicable) and translate findings into clear, actionable remediation plans
• Run threat modeling and security reviews for major architectural or product changes
• Proactively identify and remediate security issues across: Application code and APIs, Cloud infrastructure and configurations, Authentication, authorization, secrets, and data access
• Personally triage findings, write fixes, and work with teams to get changes merged and deployed safely to production
• Strengthen IAM least privilege, secrets management, encryption, logging/monitoring, and secure networking practices
• Ensure production environments follow secure baseline practices (hardening, patching, access control, auditing)
• Review and improve WAF rules, rate limiting, and abuse prevention in a practical, measurable way
• Build and maintain incident response playbooks, support investigations, and drive post-incident improvements
• Support security and privacy requirements relevant to the business (e.g., GDPR, PDPL)
• Maintain control mapping and evidence in Drata (or similar tools), with a strong focus on automation.

Senior Business Analyst

Senior Security Engineer