Job Description
Founding Internal Security Engineer | AI-native security company | Midtown Manhattan
\n
\n
A cybersecurity company building AI agents that detect, investigate, hunt and respond to threats at machine speed is hiring its first internal security engineer. It is one of the fastest-growing security companies of the last few years, with Fortune 500 and Global 2000 customers less than a year after launch. It is backed by some of the best-known operators in the industry, and the founders previously built detection and response products used by tens of thousands of customers.
\n
\n
At a security company, internal security isn’t a checkbox. Customers trust this team with their most sensitive telemetry, so the company’s own environment has to meet a higher bar than anyone else’s. You’ll set that bar.
\n
\n
What you’ll own
\n
- \n
- Internal security posture end to end: identity and access, endpoint, email, network and corporate cloud
- Identity strategy across SSO, MFA, conditional access and privileged access
- Internal threat hunting and incident response, from detection through containment, investigation and post-incident review
- Vulnerability management, endpoint hardening and continuous monitoring
- Security policies, standards and documentation, built from zero
- SOC 2 Type II and ISO 27001 work, customer security questionnaires, and vendor risk
- The security-critical parts of IT, alongside an external IT provider. Day-to-day IT is light and transitional, with a dedicated IT hire planned.
\n
\n
\n
\n
\n
\n
\n
\n
\n
What you’ll bring
\n
- \n
- 5+ years hands-on in security engineering or corporate security at a startup or scale-up
- A real threat hunting and detection background
- Incident response experience you can walk through end to end, from investigation to resolution, not escalation
- Experience building a security program, policies and documentation from scratch
- Depth in at least one of IAM, endpoint, cloud or SaaS security
- A builder’s mindset: comfortable with ambiguity, excited by zero-to-one, and genuinely interested in security and AI
\n
\n
\n
\n
\n
\n
\n
\n
Nice to have: SOC 2 or ISO 27001 audit experience, workflow automation, side projects, and experience with SIEM, XDR or detection and response tooling.
\n
\n
Why it’s worth it
\n
- \n
- You’ll build the internal security function at a security company, with your work held up against the product you’re protecting
- Direct access to the founders, high visibility across the company, and a team expected to grow around the function
- Daily hands-on use of the company’s own AI security platform
- A strong cash and equity package at a company growing well ahead of plan
\n
\n
\n
\n
\n
\n
212 970 7603
\n