Staff/Lead Enterprise Security Engineer

Beacon Software • San Francisco, CA

10d

About The Position

You will be Beacon's first dedicated security engineer. You will set the strategy for enterprise security and build the program from the ground up. This is a deeply hands-on seat, not a CISO or SOC-analyst seat and not IT support. At its core, the job is preventing, detecting, and responding to threats across Beacon's corporate and cloud environments and its portfolio companies, and owning the security stack that makes that possible. You will develop, maintain, and scale that stack across a complex multi-cloud, multi-SaaS environment, shape its architecture, and own the technical roadmap as Beacon grows. We run lean, so automation is the point, not a nice-to-have. This role is proactive and engineering-driven, not alert-babysitting. You automate the repetitive work and keep tightening the playbooks and levers as new patterns and information emerge, so the system gets sharper over time instead of just louder. You will report to the VP of IT and Integration and work with everyone from Beacon engineering to portfolio company team members.

Requirements

• Highly independent. You set priorities against a broad surface and a fast M&A cadence without being told what matters.
• Confident and credible with people outside your team. You can represent security to portfolio founders and engineering leads and bring them along.
• Deep, hands-on security engineering across endpoint, detection and response, identity, cloud, SaaS, and email, and the ability to build tooling and automation from scratch.
• A high bar for the craft: threat modeling, secure design, detection quality, and IR rigor.
• Comfortable in greenfield and ambiguity. You would rather define a program than inherit one.

Nice To Haves

• Security manager or lead who has done this at a bigger company and wants to build it again from scratch, on their own terms: automation-first and AI-forward, at a company moving fast enough to keep it interesting.
• Exceptional senior IC ready to own a broad program end to end.

Responsibilities

• Own prevention, detection, and response across corporate and cloud: tune the detection stack, write detection logic, own triage, and get telemetry into the SIEM
• Own the endpoint security stack (EDR, DLP, secure browser, hardening) and the technical roadmap for security tooling.
• Lead incident response: own readiness (playbooks and tabletops) and drive the response when something fires, pulling in IT, engineering, and portfolio teams as needed.
• Set and confirm the security standards for identity and access (MFA, SSO, SCIM lifecycle, least-privilege), and build the monitoring and reporting on top.
• Run security across the portfolio: baseline audits at onboarding, ongoing monitoring, and SaaS risk at scale (SSPM, OAuth, shadow IT, drift).
• Own the email security and phishing awareness program.
• Run vendor security review for new tools.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed