RoleDawn

18 companies hiring their first security engineer

By the RoleDawn data team · Published 2026-10-05 · Data updated 2026-10-05

18 companies in our dataset posted their first security role we've seen on their careers board — 18 of them detected in the last 7 days. For anyone selling security tooling, compliance automation or pentest services, this is a short list of accounts that may be building a security program. Signals indicate intent, not proof of budget.

Why the first security hire matters

A first security engineer or CISO triggers spend on SIEM, vulnerability scanning, identity, endpoint and pentest services. The first security person is usually hired after a large customer asks for SOC 2 or ISO 27001, after a funding round, or after an incident. In their first months they often inventory what exists, evaluate vendors and write the first policies — which can make it a good moment for relevant outreach.

Across all 354 companies we see hiring security staff, there are 777 open security roles. The companies below are different: we had not seen a security role on their careers board before. (They may have hired security staff before we started tracking them, or without a public posting.)

What kind of first security hire?

Grouping the job titles of these first hires shows what companies ask their first security person to do:

Generalist security engineer
6
Detection, SOC & incident response
4
Cloud & infrastructure security
3
Other security roles
3
Application / product security
1
Leadership (CISO, Head, Director, VP)
1

Where

The list: companies hiring their first security engineer

New function (inferred)?
GovWorx may be starting a new Security function
2026-10-05
New function (inferred)?
Zello may be starting a new Security function
2026-10-05
New function (inferred)?
People Culture Talent may be starting a new Security function
Security Engineer · San Francisco, CA; Montreal, QC; Seattle, WA; Chicago, IL; Atlanta, GA; Los Angeles, CA; New York, NY; Washington, D.C.; Boston, MA; Pittsburgh, PA; Toronto, ON; Vancouver, BC; Denver, CO; Austin, TX
2026-10-05
New function (inferred)?
Maze may be starting a new Security function
Senior Security Engineer (Remote, EU/CET) · Ireland; Portugal; Spain; Netherlands; United Kingdom
2026-10-05
New function (inferred)?
Bastion may be starting a new Security function
Senior Security Engineer · US Remote; New York City
2026-10-05
New function (inferred)?
Nelo may be starting a new Security function
2026-10-05
New function (inferred)?
HUMAN may be starting a new Security function
Cyber Detection Analyst · New York, NY
2026-10-05
New function (inferred)?
Prelim may be starting a new Security function
Lead Security Engineer · Remote | US
2026-10-05
New function (inferred)?
F2 may be starting a new Security function
Head of Security · San Francisco
2026-10-05
New function (inferred)?
Pearl may be starting a new Security function
2026-10-05
New function (inferred)?
GameChanger may be starting a new Security function
Security Engineer, Application Security · GameChanger Remote - US
2026-10-05
New function (inferred)?
Kestra Technologies may be starting a new Security function
Senior Security Engineer · Europe; India
2026-10-05
New function (inferred)?
Peek may be starting a new Security function
Security and Compliance Analyst · Mexico; Monterrey; Mexico City; Hermosillo; Guadalajara
2026-10-05
New function (inferred)?
Duna may be starting a new Security function
(Senior) Infrastructure & Security Engineer · Remote; Europe; Amsterdam
2026-10-05
New function (inferred)?
BranchLab may be starting a new Security function
2026-10-05
New function (inferred)?
ClarityPay may be starting a new Security function
Manager, IT & Information Security · New York City; Atlanta
2026-10-05
New function (inferred)?
Phantom may be starting a new Security function
2026-10-05
New function (inferred)?
Paxos may be starting a new Security function
2026-10-05

Signals indicate intent, not proof of budget. How signals are detected · Report a wrong signal

Methodology

We crawl public ATS careers boards (Greenhouse, Lever, Ashby, Workable, SmartRecruiters, Recruitee, Workday) daily and classify each title into one of 41 role families. A first posting we've seen (0 here) is a security role on a board where we had previously recorded postings and never a security role. On a company's first crawl a new function (inferred) is estimated when the board is established (roles older than 60 days) and all of its 1–2 security roles were posted in the last 21 days; we never infer security for security vendors or for boards with 15+ open roles. Full details and measured accuracy: methodology.

Related: all companies hiring security roles · first compliance & GRC hires · security hiring trends

More from the blog

Get these signals for your market in Slack every morning.
Daily digest to Slack or email. 14-day free trial, no card required.
Start free trial