Lead Security Engineer, Internal and IT

Artemis•New York, NY

1d•$180,000 - $230,000

About The Position

Artemis Security is hiring our first Security Engineer to own internal security at the company. In a cybersecurity company, internal security isn't a checkbox — it's a reflection of everything we sell. Our customers trust us with their most sensitive telemetry, and how we run our own environment has to meet a bar higher than anyone else's. This is a hands-on, senior IC role. You'll be the technical owner of Artemis's internal security posture, building the systems, controls, and programs that protect the company from the inside out. You'll also own the security-critical parts of our IT environment, working closely with our IT provider on execution. You'll report into leadership, partner with our founders, engineering, and security teams, and have the autonomy to build the security foundation the right way from day one. You won't be managing a team. You'll be building the program.

Requirements

5+ years of hands-on experience in security engineering, IT security, or corporate security, with real ownership of internal security programs at a top-tier software/tech company
Deep expertise in one or more of the following: identity and access management, endpoint security, cloud security (AWS/GCP/Azure), or SaaS security
Hands-on experience with SOC 2 and/or ISO 27001 audits, including scoping, evidence collection, and working with auditors
Strong understanding of modern attacker tradecraft — you know how real breaches happen, not just what the frameworks say
Direct experience leading incident response for internal security events, from detection through post-mortem
Familiarity with modern security tooling across EDR, SIEM, IAM, MDM, DLP, email security, and vulnerability management
Strong systems thinking — you can balance security rigor with the reality of a fast-moving startup
Clear communicator who can translate security tradeoffs to leadership and non-technical teams
Comfort operating with autonomy in an early-stage environment and building programs from scratch, without a manager or team backing you up

Nice To Haves

Prior experience as the first or founding internal security hire at a startup
Background as a practitioner in cybersecurity — SOC, threat detection, red team, or product security experience
Relevant certifications (CISSP, OSCP, GCIA, GCIH, CISA, or equivalent)
Experience with security operations tooling that Artemis itself sells (SIEM, XDR, detection & response platforms)
Familiarity with regulated frameworks beyond SOC 2 and ISO (FedRAMP, HIPAA, PCI, GDPR)

Responsibilities

Own Artemis's internal security posture end to end, including endpoint security, identity and access management, network security, email security, and cloud security for our corporate environment
Design and run our identity strategy across SSO, MFA, conditional access, and privileged access management
Build and operate our vulnerability management program, including patching, endpoint hardening, and continuous monitoring
Lead incident response for internal security events, from detection and containment through investigation and post-incident review
Drive our compliance and certification work (SOC 2 Type II, ISO 27001, and others as we grow), including scoping, evidence collection, and working with external auditors
Build and run the security awareness program, including ongoing training, phishing simulations, and role-specific education
Set and maintain security policies, standards, and internal documentation that scale with the company
Own vendor risk and third-party security reviews for tools and partners we bring in
Partner with product security and engineering leadership to keep internal and product security aligned
Own the IT architecture
Selecting which IT provider we will use and making any changes, if necessary
Manage the tools and configurations that keep the team productive and secure across Google Workspace, Slack, our identity provider, MDM, and related systems
Contribute to the design and security of our office network, AV, and physical access controls