Senior Security Engineer

Kin builds technology-driven homeowners insurance products designed to simplify and improve the homeowner experience. The Senior Security Engineer will run security operations, own endpoint detection and response, lead incident response, define identity and access controls, and build and remediate cloud security controls across AWS and related systems.

Responsibilities:

• Own and tune our EDR/MDR stack, building the detection policies, runbooks, and automation that keep escalations focused on real threats
• Lead incident response end to end: investigation, containment, and remediation, from compromised laptops to cloud and identity incidents
• Own endpoint security across managed and BYOD devices, setting device posture standards, hardening baselines, and the policies that govern what can access Kin data
• Define the security requirements behind our identity program and partner with IT to implement them in SSO, shaping our RBAC model and driving an access review cadence that removes stale permissions
• Build and remediate security controls across AWS infrastructure, Google Workspace, identity, and data protection
• Serve as the front door for security across Kin, turning around security tickets and questions quickly enough that people bring you things early instead of working around the process
• Conduct threat modeling across systems, processes, and vendor implementations, delivering risk assessments teams can act on
• Instill a culture of security across the company, taking everyday opportunities to educate Kinfolk, raise awareness of real risks, and give people in every function the judgment to make safer decisions on their own

Requirements:

• • 5+ years in security operations, detection and response, or security engineering
• • Hands-on experience running a modern EDR program: building and tuning detection logic, writing response runbooks, and leading investigations through to containment
• • Endpoint security experience across managed and BYOD fleets, including device posture, hardening baselines, and MDM
• • Identity and access management depth: defining access control requirements, designing RBAC models, and running access reviews in an SSO environment
• • AWS security experience across IAM, network controls, logging, and configuration management, with a track record of remediating findings directly
• • Comfort working in infrastructure-as-code environments and automating security tasks
• • Threat modeling experience across systems, processes, or vendor implementations
• • A record of fast, reliable responsiveness on security requests, whether that's a ticket queue or someone asking a question in a channel
• • Experience working alongside IT on shared systems, setting security requirements
• • A track record of holding teams accountable for security findings and driving remediation through to completion
• • The ability to explain security risk to non-technical audiences in terms they can act on, so people across the company bring you problems early rather than working around you
• For all other positions, these roles can sit in any of the following 41 states: AL, AR, AZ, CA (exempt only), CO, CT, FL, GA, ID, IL, IN, IA, KS, KY, LA, MA, ME, MD, MI, MN, MO, MT, NC, NE, NJ, NM, NV, NY, OH, OK, OR, PA, SC, SD, TN, TX, UT, VT, VA, WA, and WI. Please only apply if you are able to live and work full-time in one of the states listed above
• For remote technical positions located in Canada, we are only able to hire individuals who reside in Ontario. Applicants must be able to live and work full-time in Ontario to be considered
• • Terraform and CI/CD pipeline experience
• • Zero trust networking experience, including designing or operating identity-aware and device-aware access controls
• • Working knowledge of NIST, ISO 27001, SOC 2, and SOX, and how regulatory compliance translates into engineering requirements
• • Experience securing a fully remote workforce
• • Experience building security awareness or training programs for a non-technical audience
• • Google Workspace security administration experience
• • Security certifications such as AWS Certified Security Specialty, GCIH, or GCIA