Security Engineer

Founding Internal Security Engineer | AI-native security company | Midtown Manhattan

A cybersecurity company building AI agents that detect, investigate, hunt and respond to threats at machine speed is hiring its first internal security engineer. It is one of the fastest-growing security companies of the last few years, with Fortune 500 and Global 2000 customers less than a year after launch. It is backed by some of the best-known operators in the industry, and the founders previously built detection and response products used by tens of thousands of customers.

At a security company, internal security isn’t a checkbox. Customers trust this team with their most sensitive telemetry, so the company’s own environment has to meet a higher bar than anyone else’s. You’ll set that bar.

What you’ll own

• Internal security posture end to end: identity and access, endpoint, email, network and corporate cloud
• Identity strategy across SSO, MFA, conditional access and privileged access
• Internal threat hunting and incident response, from detection through containment, investigation and post-incident review
• Vulnerability management, endpoint hardening and continuous monitoring
• Security policies, standards and documentation, built from zero
• SOC 2 Type II and ISO 27001 work, customer security questionnaires, and vendor risk
• The security-critical parts of IT, alongside an external IT provider. Day-to-day IT is light and transitional, with a dedicated IT hire planned.

What you’ll bring

• 5+ years hands-on in security engineering or corporate security at a startup or scale-up
• A real threat hunting and detection background
• Incident response experience you can walk through end to end, from investigation to resolution, not escalation
• Experience building a security program, policies and documentation from scratch
• Depth in at least one of IAM, endpoint, cloud or SaaS security
• A builder’s mindset: comfortable with ambiguity, excited by zero-to-one, and genuinely interested in security and AI

Nice to have: SOC 2 or ISO 27001 audit experience, workflow automation, side projects, and experience with SIEM, XDR or detection and response tooling.

Why it’s worth it

• You’ll build the internal security function at a security company, with your work held up against the product you’re protecting
• Direct access to the founders, high visibility across the company, and a team expected to grow around the function
• Daily hands-on use of the company’s own AI security platform
• A strong cash and equity package at a company growing well ahead of plan

View phone number on click.appcast.io

View email address on click.appcast.io