Senior Security Engineer

Core Responsibilities

Own endpoint detection and cloud security at a fully cloud-based company. Tune out the noise, lock down AWS, and build security champions across Kin with 5+ years of experience.

The Opportunity

We're looking for a Senior Security Engineer to run security operations at Kin. This is a hands-on role focused on:

• Own and tune our EDR/MDR stack, building detection policies, runbooks, and automation to address real threats.
• Lead end-to-end incident response, from investigation to containment, covering compromised laptops, cloud incidents, and identity breaches.
• Define and enforce endpoint security across managed and BYOD devices, including device posture standards and hardening baselines.
• Partner with IT to implement identity and access controls in SSO, shaping RBAC models and driving access reviews.
• Build and remediate AWS security controls, Google Workspace, and data protection measures.
• Serve as the primary security contact for Kinfolk, ensuring quick responses to security questions and tickets.
• Conduct threat modeling across systems, processes, and vendor implementations, delivering actionable risk assessments.
• Instill a culture of security across the company, educating teams and fostering safer decision-making.

Success Metrics

In your first 6–12 months, success will be measured by:

• Detection policies backed by runbooks, ensuring the team focuses on real threats.
• Clear device posture standards, with managed devices meeting compliance and predictable access reviews.
• Proactive remediation of cloud vulnerabilities and misconfigurations in AWS and Google Workspace.

Requirements

Technical:

• 5+ years in security operations, detection and response, or security engineering.
• Hands-on experience running a modern EDR program, including detection logic, response runbooks, and investigations.
• Endpoint security experience across managed and BYOD fleets, including device posture and MDM.
• Depth in identity and access management, including RBAC models and access reviews in SSO environments.
• AWS security experience across IAM, network controls, logging, and configuration management, with a track record of direct remediation.
• Comfort working in infrastructure-as-code environments and automating security tasks.
• Experience in threat modeling across systems, processes, or vendor implementations.

Collaboration and Communication:

• Fast, reliable responsiveness to security requests.
• Experience working alongside IT on shared systems, setting security requirements.
• Ability to explain security risks to non-technical audiences.

Bonus:

• Experience with Terraform and CI/CD pipelines.
• Zero trust networking experience, including identity-aware and device-aware access controls.
• Working knowledge of NIST, ISO 27001, SOC 2, and SOX compliance frameworks.
• Experience securing a fully remote workforce.
• Security awareness or training program experience.
• Google Workspace security administration experience.
• Certifications such as AWS Certified Security Specialty, GCIH, or GCIA.