> Markdown version of [/jobs/ext/3803911-security-engineer](https://www.wearedevelopers.com/jobs/ext/3803911-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Franklin Fitch
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cloud Computing Security, Identity and Access Management, Security Information and Event Management, Software Vulnerability Management, Agentic-AI
- **Published:** October 17, 2026
- **Apply:** https://www.juju.com/job/2_166234526

## About the Role

* 5+ years hands-on in security engineering or corporate security at a startup or scale-up
 * A real threat hunting and detection background
 * Incident response experience you can walk through end to end, from investigation to resolution, not escalation
 * Experience building a security program, policies and documentation from scratch
 * Depth in at least one of IAM, endpoint, cloud or SaaS security
 * A builder's mindset: comfortable with ambiguity, excited by zero-to-one, and genuinely interested in security and AI

Nice to have: SOC 2 or ISO 27001 audit experience, workflow automation, side projects, and experience with SIEM, XDR or detection and response tooling.

## Description

A cybersecurity company building AI agents that detect, investigate, hunt and respond to threats at machine speed is hiring its first internal security engineer. It is one of the fastest-growing security companies of the last few years, with Fortune 500 and Global 2000 customers less than a year after launch. It is backed by some of the best-known operators in the industry, and the founders previously built detection and response products used by tens of thousands of customers.

At a security company, internal security isn't a checkbox. Customers trust this team with their most sensitive telemetry, so the company's own environment has to meet a higher bar than anyone else's. You'll set that bar.

What you'll own

 * Internal security posture end to end: identity and access, endpoint, email, network and corporate cloud
 * Identity strategy across SSO, MFA, conditional access and privileged access
 * Internal threat hunting and incident response, from detection through containment, investigation and post-incident review
 * Vulnerability management, endpoint hardening and continuous monitoring
 * Security policies, standards and documentation, built from zero
 * SOC 2 Type II and ISO 27001 work, customer security questionnaires, and vendor risk
 * The security-critical parts of IT, alongside an external IT provider. Day-to-day IT is light and transitional, with a dedicated IT hire planned. xrbllit