Senior Security Engineer - App Sec

The role

You will advise developers on secure design and review code and architecture. You will also write code to fix vulnerabilities and harden systems across applications and cloud infrastructure.

What you will do

• Own vulnerability remediation across engineering and enforce remediation SLAs
• Write and ship code to harden Kin systems
• Lead secure code reviews and architecture reviews
• Partner with developers on dependency and supply chain security
• Build security tooling and automation
• Identify and collaborate on remediation of cloud vulnerabilities across AWS and Terraform-managed infrastructure
• Lead threat modeling with engineering teams
• Monitor emerging threats across application, code, and AI security
• Mentor engineers on secure coding practices

Required qualifications

• 5+ years of experience in software engineering or security engineering
• At least 1 year focused on security
• Hands-on proficiency in at least one backend programming language
• Ability to write and ship production code fixes
• Hands-on experience working with SAST/DAST tools in CI/CD pipelines
• Experience driving vulnerability remediation at scale using tools such as GitHub Advanced Security
• Experience performing secure code reviews, architecture reviews, and threat modeling
• Hands-on experience securing AWS environments (IAM, VPCs, WAF)
• Experience remediating infrastructure-as-code in Terraform
• Ability to explain security concepts, risks, and tradeoffs clearly to technical and non-technical audiences

Nice to have

• Ruby

Benefits

• Competitive salary and company equity through Restricted Stock Units (RSUs)
• 401(k) with company match up to 4% of eligible earnings
• Multiple medical plan options
• Dental and vision coverage
• Company-funded HSA contributions
• Company-paid life insurance and short-term disability
• Supplemental benefit options including long-term disability, critical illness, accident, legal, and pet insurance
• Access to mental health support and confidential counseling resources
• Flexible PTO for exempt employees
• 8 company-observed holidays
• Paid parental leave (up to 14 weeks for birthing parents, 8 weeks for non-birthing parents)
• Professional development budgets for certifications, conferences, and learning

Before you apply

• Please only apply if you are able to live and work full-time in one of the listed states
• For remote technical positions in Canada, you must reside in Ontario

About the company

Kin makes life simpler, more affordable, and better for homeowners. Founded in 2016, Kin is a remote-first employer.