Security Engineer

Franklin Fitch; New York (NY); On-site; USD 180,000 - 260,000; Full time

Job summary

Franklin Fitch in Midtown Manhattan is hiring its founding Internal Security Engineer to build the security function from the ground up for an AI-native security platform. You’ll own the security posture, controls, and tooling that protect customer data and the company’s rapidly evolving environment.

You’ll work directly with founders, implement threat hunting, incident response, and risk programs, and collaborate across IT and product to turn zero-to-one security into scale.

Qualifications

• 5+ years hands-on in security engineering or corporate security at a startup or scale-up.
• Hands-on threat hunting and detection background.
• End-to-end incident response experience from detection to resolution.
• Experience building a security program, policies and documentation from scratch.
• Depth in at least one of IAM, endpoint, cloud or SaaS security.
• Builder’s mindset: comfortable with ambiguity and excited by zero-to-one, and AI security.

Responsibilities

• Internal security posture end-to-end: identity and access, endpoint, email, network and cloud.
• Identity strategy across SSO, MFA, conditional access and privileged access.
• Internal threat hunting and incident response from detection through containment and review.
• Vulnerability management, endpoint hardening and continuous monitoring.
• Security policies, standards and documentation built from zero.
• SOC 2 Type II and ISO 27001 work, customer security questionnaires, and vendor risk.
• The security-critical parts of IT alongside an external IT provider; day-to-day IT is light with a dedicated hire planned.

Skills

Threat hunting

Incident response

Security program development

Identity and access management

Endpoint security

Cloud security

SaaS security

Zero-to-one security

Tools

SIEM

XDR

Detection tooling

Job description

Founding Internal Security Engineer | AI-native security company | Midtown Manhattan

A cybersecurity company building AI agents that detect, investigate, hunt and respond to threats at machine speed is hiring its first internal security engineer. It is one of the fastest-growing security companies of the last few years, with Fortune 500 and Global 2000 customers less than a year after launch. It is backed by some of the best-known operators in the industry, and the founders previously built detection and response products used by tens of thousands of customers.

At a security company, internal security isn’t a checkbox. Customers trust this team with their most sensitive telemetry, so the company’s own environment has to meet a higher bar than anyone else’s. You’ll set that bar.

What you’ll own

• Internal security posture end to end: identity and access, endpoint, email, network and corporate cloud
• Identity strategy across SSO, MFA, conditional access and privileged access
• Internal threat hunting and incident response, from detection through containment, investigation and post-incident review
• Vulnerability management, endpoint hardening and continuous monitoring
• Security policies, standards and documentation, built from zero
• SOC 2 Type II and ISO 27001 work, customer security questionnaires, and vendor risk
• The security-critical parts of IT, alongside an external IT provider. Day-to-day IT is light and transitional, with a dedicated IT hire planned.

What you’ll bring

• 5+ years hands‑on in security engineering or corporate security at a startup or scale‑up
• A real threat hunting and detection background
• Incident response experience you can walk through end to end, from investigation to resolution, not escalation
• Experience building a security program, policies and documentation from scratch
• Depth in at least one of IAM, endpoint, cloud or SaaS security
• A builder’s mindset: comfortable with ambiguity, excited by zero‑to‑one, and genuinely interested in security and AI

Nice to have:

• SOC 2 or ISO 27001 audit experience, workflow automation, side projects, and experience with SIEM, XDR or detection and response tooling.

Why it’s worth it

• You’ll build the internal security function at a security company, with your work held up against the product you’re protecting
• Direct access to the founders, high visibility across the company, and a team expected to grow around the function
• Daily hands‑on use of the company’s own AI security platform
• A strong cash and equity package at a company growing well ahead of plan