Lead Security Engineer

DMCG Global; New York (NY); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity

Job summary

DMCG Global in New York, NY is seeking a Lead Internal Security Engineer to own and elevate the company's internal security posture across identities, endpoints, applications and infrastructure. This hands-on role combines leadership with deep technical work and high visibility across engineering and leadership.

You will design and implement IAM controls, endpoint security, cloud and internal network protections, respond to incidents, drive vulnerability management and shape security policies as

Qualifications

• 5+ years in Security Engineering, Corporate Security or IT Security in tech/software environments.
• Strong hands-on experience with identity security controls (SSO, MFA, conditional access, PAM).
• Proven ability to secure endpoints, SaaS apps and internal infrastructure.
• Experience with vulnerability management, security monitoring and incident response.
• Demonstrated ownership of security initiatives from problem to solution.
• Excellent communication across technical and non-technical teams.

Responsibilities

• Identity & Access Management: Design, implement and maintain security controls across SSO, MFA, conditional access, privileged access and identity lifecycle management.
• Endpoint & Device Security: Own endpoint protection, MDM, device hardening and security monitoring across corporate environments.
• Internal Infrastructure Security: Secure corporate SaaS applications, cloud services, networks and internal technology systems.
• Security Engineering & Automation: Develop and improve security controls, automate processes and work with novel security technologies.
• Vulnerability Management: Identify, prioritise and remediate vulnerabilities with engineering/IT teams.
• Incident Response: Take ownership of internal security incidents, including investigation, containment, remediation and continuous improvement.
• Security Ownership: Help establish practical security policies, processes and standards for a growing organisation.

Skills

Security engineering

Identity security

Incident response

Vulnerability management

Problem solving

Independent decision making

Job description

An opportunity to build, lead and make a real impact.

We're working with a rapidly scaling, well-backed Cyber Security technology company looking for an experienced Lead Internal Security Engineer to take ownership of its internal security environment.

This isn't your typical Security Engineering position.

You'll have the opportunity to build and improve security systems, introduce new technologies, influence technical decisions and help shape how security operates as the business grows.

You'll work alongside highly talented engineers and technology leaders in an environment where collaboration, curiosity and technical ability matter more than hierarchy.

We're looking for someone experienced enough to take ownership, but open-minded enough to challenge traditional ways of working.

The Opportunity

As Lead Internal Security Engineer, you'll take responsibility for securing the company's corporate infrastructure, identities, endpoints, applications and internal systems.

This is a hands-on individual contributor position with significant autonomy and visibility across the business.

You'll be trusted to make decisions, solve problems and implement solutions, working closely with engineering teams, leadership and external technology partners.

The company operates at pace, so you'll need to be comfortable adapting, learning unfamiliar technologies and working with bespoke tools rather than relying entirely on established processes.

What You'll Be Doing

• Identity & Access Management: Design, implement and maintain security controls across SSO, MFA, conditional access, privileged access and identity lifecycle management.
• Endpoint & Device Security: Own endpoint protection, MDM, device hardening and security monitoring across corporate environments.
• Internal Infrastructure Security: Secure corporate SaaS applications, cloud services, networks and internal technology systems.
• Security Engineering & Automation: Develop and improve security controls, automate processes and work with new or bespoke security technologies.
• Vulnerability Management: Identify, prioritise and remediate vulnerabilities, working closely with engineering and IT teams.
• Incident Response: Take ownership of internal security incidents, including investigation, containment, remediation and continuous improvement.
• Security Ownership: Help establish practical security policies, processes and standards that support a rapidly growing organisation.

What We're Looking For

• 5+ years of hands-on Security Engineering, Corporate Security or IT Security experience, ideally within a software or technology business.
• Strong practical experience implementing and managing identity security controls, including SSO, MFA, conditional access and PAM.
• Proven experience securing corporate endpoints, SaaS applications and internal infrastructure.
• Experience with vulnerability management, security monitoring and incident response.
• Demonstrated ownership of security initiatives, from identifying a problem through to implementing a solution.
• Strong technical problem-solving skills and the confidence to make decisions independently.
• Excellent communication skills and the ability to work across technical and non-technical teams.

Just as importantly, we're looking for the right mindset.

Someone who:

• Has substantial technical experience but remains curious and willing to learn.
• Can adapt quickly to new technologies, bespoke tools and different ways of working.
• Enjoys solving problems rather than simply following established processes.
• Is comfortable operating within a flat organisational structure.
• Takes ownership without needing constant direction.
• Thrives in a collaborative, fast-paced environment where priorities can evolve.

Why Consider This Opportunity?

Real ownership: Take responsibility for internal security rather than becoming one small part of a large established function.

Technical freedom: Help shape the systems, technologies and security practices used as the company grows.

Exceptional colleagues: Work alongside highly experienced engineers and technology professionals with backgrounds in leading global technology companies.

Career growth: Join at an exciting stage of expansion, with the opportunity to make a lasting impact on the business.

Autonomy and influence: Work directly with technical leaders in an environment that values initiative, collaboration and good ideas.

Equity: Benefit from the opportunity to share in the company's future success.

Interested?

If you're an experienced Security Engineer who enjoys building things, solving difficult technical problems and learning new technologies, I'd welcome a conversation.

You don't need to have worked with every tool. You do need strong engineering fundamentals, genuine ownership and the ability to learn quickly, try new ways of working and think outside the box.