As a security professional, most startups understandably outsource security as much as I could so long as the cost met the needs, until I had a product shipped to market and had enough users and reputation to start to care about the risk.

Good luck. I’ll stick to Incident Response and SIEM software.