Security Engineer

Job Description

Founding Internal Security Engineer | AI-native security company | Midtown Manhattan

\n

\n

A cybersecurity company building AI agents that detect, investigate, hunt and respond to threats at machine speed is hiring its first internal security engineer. It is one of the fastest-growing security companies of the last few years, with Fortune 500 and Global 2000 customers less than a year after launch. It is backed by some of the best-known operators in the industry, and the founders previously built detection and response products used by tens of thousands of customers.

\n

\n

At a security company, internal security isn’t a checkbox. Customers trust this team with their most sensitive telemetry, so the company’s own environment has to meet a higher bar than anyone else’s. You’ll set that bar.

\n

\n

What you’ll own

\n

\n
• Internal security posture end to end: identity and access, endpoint, email, network and corporate cloud
\n
• Identity strategy across SSO, MFA, conditional access and privileged access
\n
• Internal threat hunting and incident response, from detection through containment, investigation and post-incident review
\n
• Vulnerability management, endpoint hardening and continuous monitoring
\n
• Security policies, standards and documentation, built from zero
\n
• SOC 2 Type II and ISO 27001 work, customer security questionnaires, and vendor risk
\n
• The security-critical parts of IT, alongside an external IT provider. Day-to-day IT is light and transitional, with a dedicated IT hire planned.
\n

\n

\n

What you’ll bring

\n

\n
• 5+ years hands-on in security engineering or corporate security at a startup or scale-up
\n
• A real threat hunting and detection background
\n
• Incident response experience you can walk through end to end, from investigation to resolution, not escalation
\n
• Experience building a security program, policies and documentation from scratch
\n
• Depth in at least one of IAM, endpoint, cloud or SaaS security
\n
• A builder’s mindset: comfortable with ambiguity, excited by zero-to-one, and genuinely interested in security and AI
\n

\n

\n

Nice to have: SOC 2 or ISO 27001 audit experience, workflow automation, side projects, and experience with SIEM, XDR or detection and response tooling.

\n

\n

Why it’s worth it

\n

\n
• You’ll build the internal security function at a security company, with your work held up against the product you’re protecting
\n
• Direct access to the founders, high visibility across the company, and a team expected to grow around the function
\n
• Daily hands-on use of the company’s own AI security platform
\n
• A strong cash and equity package at a company growing well ahead of plan
\n

\n

\n

View phone number on ziprecruiter.com

\n

View email address on ziprecruiter.com