Senior Security Engineer - App Sec

The Opportunity

We’re looking for a Sr Security Engineer with a focus on application security to help us ship fast and ship securely. In this hands-on role, you’ll advise developers on secure design, review code and architecture before it ships, and get into the code yourself to fix vulnerabilities and collaborate on hardening systems at the source, across both our applications and our cloud infrastructure.

Your Responsibilities

• Vulnerability Remediation: Own remediation across engineering, driving findings to resolution and enforcing SLAs.
• Secure Coding: Write and ship code to harden Kin systems, working alongside developers to resolve issues at the source.
• Reviews: Lead secure code reviews, architecture reviews, and threat modeling to identify risks early.
• Supply Chain Security: Partner with developers on dependency security and lead remediation for third-party vulnerabilities.
• Automation: Build security tooling and automation to scale detection, triage, and remediation.
• Cloud Security: Identify and remediate cloud vulnerabilities across AWS environments and Terraform-managed infrastructure.
• Mentorship: Mentor engineers on secure coding practices and drive a security-first mindset.

What You’ll Bring

• 5+ years of experience in software or security engineering (at least 1 year focused on security).
• Hands-on proficiency in at least one backend language (Ruby strongly preferred).
• Experience with SAST/DAST tools in CI/CD pipelines.
• Experience driving vulnerability remediation at scale (e.g., GitHub Advanced Security).
• Hands-on experience securing AWS environments (IAM, VPCs, WAF) and Terraform.
• Ability to explain security concepts clearly to technical and non-technical audiences.

How We Work

Kin is a remote-first company. We value ownership, lean operations, and a 'run through walls' mentality. We are currently hiring for this role in 41 US states and Ontario, Canada.