Security Engineer

The role

You will own the security program end-to-end, including CorpSec, SecOps, and compliance. You will build out practices across CloudSec and AppSec and drive SOC 2 audits.

What you will do

• Own detection, response, and prevention across a Mac-first environment
• Run and refine the SentinelOne stack, phishing/email-security defense, and incident response playbooks
• Drive the SOC 2 / Vanta program and own the January–February audit cycle
• Own Okta, Google Workspace, and access-management guardrails
• Use Datadog and SentinelOne to build alerts and dashboards
• Manage security review of vendors and integrations
• Provide clear docs, practical training, and playbooks

Required qualifications

• 4–6 years of security engineering experience
• Hands-on, zero-to-one operator experience building security programs from scratch
• Mac-first environment experience including Mac fleet security, MDM, and Apple-native tooling
• CorpSec + SecOps depth in detection engineering, incident response, phishing defense, and endpoint security
• SOC 2 experience owning or contributing to an audit cycle
• Comfortable with Datadog, SentinelOne, Okta, Google Workspace, and Vanta (or close analogues)
• Excellent communication for writing playbooks and explaining reasoning to non-security stakeholders

Nice to have

• CS degree
• CISSP or CISM
• Prior DevOps or platform engineering background that transitioned into security
• Experience running third-party security reviews and vendor risk
• Detection engineering at scale (Datadog / SIEM authoring)

About the company

Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. The platform supports over 15,000 government agencies in 190 countries.