Staff/Lead Enterprise Security Engineer

Beacon Software•San Francisco, CA

About The Position

Beacon is seeking its first dedicated security engineer to establish and lead the enterprise security program. This role is hands-on, focusing on preventing, detecting, and responding to threats across corporate, cloud, and portfolio company environments. The engineer will build and scale the security stack, define its architecture, and own the technical roadmap. The position emphasizes automation and a proactive, engineering-driven approach rather than reactive alert monitoring. The role reports to the VP of IT and Integration and collaborates with various teams across Beacon and its portfolio companies.

Requirements

Experience as a security manager or lead at a larger company, with a desire to build a program from scratch.
Alternatively, an exceptional senior individual contributor ready to own a broad program end-to-end.
Highly independent with the ability to set priorities in an ambiguous environment with a fast M&A cadence.
Confident and credible in representing security to external stakeholders, including portfolio founders and engineering leads.
Deep, hands-on security engineering experience across endpoint, detection and response, identity, cloud, SaaS, and email.
Ability to build tooling and automation from scratch.
High standard for craft, including threat modeling, secure design, detection quality, and incident response rigor.
Comfortable working in greenfield environments and ambiguity.
Automation-first and AI-forward mindset.

Nice To Haves

Experience in a company moving fast enough to keep security challenges interesting.

Responsibilities

Set the strategy for enterprise security and build the program from the ground up.
Prevent, detect, and respond to threats across corporate and cloud environments.
Develop, maintain, and scale the security stack across multi-cloud and multi-SaaS environments.
Shape the architecture and own the technical roadmap for security tooling.
Automate repetitive security tasks and refine playbooks based on emerging patterns.
Tune the detection stack, write detection logic, and manage triage.
Integrate telemetry into the SIEM.
Own the endpoint security stack (EDR, DLP, secure browser, hardening) and its technical roadmap.
Lead incident response readiness (playbooks, tabletops) and drive response efforts.
Set and confirm security standards for identity and access management (MFA, SSO, SCIM, least-privilege).
Build monitoring and reporting for identity and access management.
Manage security across the portfolio, including baseline audits, ongoing monitoring, and SaaS risk management (SSPM, OAuth, shadow IT, drift).
Own the email security and phishing awareness program.
Conduct vendor security reviews for new tools.