Security Engineer

Kami is a leading digital classroom platform that empowers students and supports teachers globally. They are seeking a Security Engineer who will actively identify and remediate security vulnerabilities within their systems and applications, ensuring a secure and modernized environment.

Responsibilities:

• Utilize automated scanners and internal risk processes to hunt down defects. Actively dive into code bases to update outdated libraries, rewrite out-of-life legacy components, and resolve critical technical debt
• Ensure continuous modernization of Kami’s codebase by wiping out vulnerabilities stemming from deprecated packages and old dependencies before they can be exploited
• Collaborate actively with engineering pods, reviewing their security posture and directly assisting them in troubleshooting and executing defect remediation
• Accelerate internal security engineering cycles by clearing remediation blockers for engineering teams, turning security into a supportive peer function
• Draft comprehensive, easy-to-follow security playbooks, coding standards guidelines, and remediation documentation for internal distribution
• Create a standardized knowledge base that upskills the entire engineering group on modern secure coding practices and streamlined defect fixing
• Embed automated security scanning tools, analysis processes, and proactive guardrails cleanly inside the active software development lifecycle
• Ensure systematic and early-stage identification of technical faults across applications, moving toward a continuous 'shift-left' security model
• Implement and maintain robust cloud infrastructure protections, including customized firewalls, intrusion detection mechanisms, and advanced encryption protocols
• Preserve the absolute structural integrity of our global digital infrastructure, securely partitioning and safeguarding core assets
• Manage and execute the emergency incident response lifecycle, building automated logic to spot, flag, and contain system anomalies instantly
• Deliver rapid technical resolution timelines during active security incidents, significantly minimizing structural exposure or system downtime

Requirements:

• 5-8+ years of experience in an Application Security or Security Engineering role
• Proven experience managing technical debt, identifying out-of-life or legacy code paths, and safely updating third-party libraries/dependencies without breaking production features
• Excellent written skills with a knack for building clean security playbooks
• Familiarity with cloud-native architectures, containerized applications, CI/CD integrations, and configuring automated security testing systems (SAST/DAST/SCA)
• Strong builder mindset with proactive problem solving
• Ability to read code, identify architectural flaws, and write the necessary fixes or scripts to resolve them
• Exposure to application security fundamentals, specifically with OWASP
• Experience with network configuration and application deployment