Note: The job is a remote job and is open to candidates in USA. Kin is hiring a Senior Security Engineer to own security operations at its remote-first, cloud-based company. The role focuses on endpoint and identity security, detection and incident response, AWS security controls, and building security awareness across the company.

Responsibilities

• Own and tune our EDR/MDR stack, building the detection policies, runbooks, and automation that keep escalations focused on real threats
• Lead incident response end to end: investigation, containment, and remediation, from compromised laptops to cloud and identity incidents
• Own endpoint security across managed and BYOD devices, setting device posture standards, hardening baselines, and the policies that govern what can access Kin data
• Define the security requirements behind our identity program and partner with IT to implement them in SSO, shaping our RBAC model and driving an access review cadence that removes stale permissions
• Build and remediate security controls across AWS infrastructure, Google Workspace, identity, and data protection
• Serve as the front door for security across Kin, turning around security tickets and questions quickly enough that people bring you things early instead of working around the process
• Conduct threat modeling across systems, processes, and vendor implementations, delivering risk assessments teams can act on
• Instill a culture of security across the company, taking everyday opportunities to educate Kinfolk, raise awareness of real risks, and give people in every function the judgment to make safer decisions on their own

Skills

• 5+ years in security operations, detection and response, or security engineering
• Hands-on experience running a modern EDR program: building and tuning detection logic, writing response runbooks, and leading investigations through to containment
• Endpoint security experience across managed and BYOD fleets, including device posture, hardening baselines, and MDM
• Identity and access management depth: defining access control requirements, designing RBAC models, and running access reviews in an SSO environment
• AWS security experience across IAM, network controls, logging, and configuration management, with a track record of remediating findings directly
• Comfort working in infrastructure-as-code environments and automating security tasks
• Threat modeling experience across systems, processes, or vendor implementations
• A record of fast, reliable responsiveness on security requests, whether that's a ticket queue or someone asking a question in a channel
• Experience working alongside IT on shared systems, setting security requirements
• A track record of holding teams accountable for security findings and driving remediation through to completion
• The ability to explain security risk to non-technical audiences in terms they can act on, so people across the company bring you problems early rather than working around you
• Terraform and CI/CD pipeline experience
• Zero trust networking experience, including designing or operating identity-aware and device-aware access controls
• Working knowledge of NIST, ISO 27001, SOC 2, and SOX, and how regulatory compliance translates into engineering requirements
• Experience securing a fully remote workforce
• Experience building security awareness or training programs for a non-technical audience
• Google Workspace security administration experience
• Security certifications such as AWS Certified Security Specialty, GCIH, or GCIA

Benefits

• Company equity through Restricted Stock Units (RSUs), granted as part of the standard compensation package and based on role and level
• 401(k) with company match up to 4% of eligible earnings
• Multiple medical plan options, plus dental and vision coverage
• Company-funded HSA contributions (based on medical plan selection)
• Company-paid life insurance and short-term disability
• Supplemental benefit options, including long-term disability, critical illness, accident, legal, and pet insurance
• Access to mental health support and confidential counseling resources
• Flexible PTO for exempt employees (most employees take 15–20 days per year), plus 8 company-observed holidays
• Paid parental leave, including up to 14 weeks at 100% pay for birthing parents and 8 weeks at 100% pay for non-birthing parents
• Career mobility and internal growth opportunities across the organization
• Professional development budgets for certifications, conferences, and learning, subject to management approval
• Remote-first work arrangement

Company Overview