The ad says“You’ll also work directly in AWS, building and remediating cloud security controls”
The ad says“Terraform and CI/CD pipeline experience”
The ad says“Hands-on experience running a modern EDR program: building and tuning detection logic, writing response runbooks, and leading investigations through to containment”
The ad says“This is a hands-on role, not a consultative one. You’ll own our EDR/MDR stack and the detection tuning, runbooks, and automation that keep a lean team focused on real threats”
The ad says“Build and remediate security controls across AWS infrastructure, Google Workspace, identity, and data protection”
The ad says“Google Workspace security administration experience”
The ad says“AWS security experience across IAM, network controls, logging, and configuration management, with a track record of remediating findings directly”
The ad says“Hands-on experience running a modern EDR program: building and tuning detection logic, writing response runbooks, and leading investigations through to containment”
The ad says“Comfort working in infrastructure-as-code environments and automating security tasks”
The ad says“Working knowledge of NIST, ISO 27001, SOC 2, and SOX, and how regulatory compliance translates into engineering requirements”
The ad says“Endpoint security experience across managed and BYOD fleets, including device posture, hardening baselines, and MDM”
The ad says“Working knowledge of NIST, ISO 27001, SOC 2, and SOX, and how regulatory compliance translates into engineering requirements”
The ad says“Identity and access management depth: defining access control requirements, designing RBAC models, and running access reviews in an SSO environment”
The ad says“Working knowledge of NIST, ISO 27001, SOC 2, and SOX, and how regulatory compliance translates into engineering requirements”
The ad says“Working knowledge of NIST, ISO 27001, SOC 2, and SOX, and how regulatory compliance translates into engineering requirements”
The ad says“Identity and access management depth: defining access control requirements, designing RBAC models, and running access reviews in an SSO environment”
The ad says“Terraform and CI/CD pipeline experience”
The ad says“Threat modeling experience across systems, processes, or vendor implementations”
The ad says“Zero trust networking experience, including designing or operating identity-aware and device-aware access controls”
Values
The ad says“Security certifications such as AWS Certified Security Specialty, GCIH, or GCIA”
The ad says“Security certifications such as AWS Certified Security Specialty, GCIH, or GCIA”
The ad says“Security certifications such as AWS Certified Security Specialty, GCIH, or GCIA”
We’re looking for a Senior Security Engineer to run security operations at Kin
We’re remote-first and fully cloud-based, with Kinfolk across more than 35 states working from company laptops and personal devices, signing into everything through SSO
That makes endpoints and identity our front line
Who has access to what, which devices are allowed to touch our data, and how fast we catch it when something goes wrong are the questions this role answers every day
This is a hands-on role, not a consultative one. You’ll own our EDR/MDR stack and the detection tuning, runbooks, and automation that keep a lean team focused on real threats
You’ll run endpoint security across managed laptops and BYOD, partner with IT to define the access controls and identity policies that govern our SSO environment, and lead incident response from first alert through containment
You’ll also work directly in AWS, building and remediating cloud security controls
And you’ll be the person Kinfolk come to with security questions, answering fast enough that people ask rather than guess
Customers trust us with their claims, their property details, and their financial information. Protecting that is the work
Own and tune our EDR/MDR stack, building the detection policies, runbooks, and automation that keep escalations focused on real threats
Lead incident response end to end: investigation, containment, and remediation, from compromised laptops to cloud and identity incidents
Own endpoint security across managed and BYOD devices, setting device posture standards, hardening baselines, and the policies that govern what can access Kin data
Define the security requirements behind our identity program and partner with IT to implement them in SSO, shaping our RBAC model and driving an access review cadence that removes stale permissions
Build and remediate security controls across AWS infrastructure, Google Workspace, identity, and data protection
Serve as the front door for security across Kin, turning around security tickets and questions quickly enough that people bring you things early instead of working around the process
Conduct threat modeling across systems, processes, and vendor implementations, delivering risk assessments teams can act on
Instill a culture of security across the company, taking everyday opportunities to educate Kinfolk, raise awareness of real risks, and give people in every function the judgment to make safer decisions on their own
Success in this role:
In your first 6–12 months at Kin, success is less about checking boxes and more about the impact you create. You’ll use your skills and judgment to take ownership of meaningful work, improve how we operate, and help move Kin’s mission forward
Along the way, you’ll deliver outcomes that make a real difference for both Kinfolk and the homeowners we serve
By the end of your first year, you should feel confident in your role, trusted as an owner, and proud of the progress you’ve helped make
Detection is tuned and backed by runbooks, so the team’s hours go toward investigating real threats instead of triaging noise
A clear device posture standard exists, managed devices meet it, and access reviews run with IT on a predictable cadence instead of being a scramble before an audit
Cloud vulnerabilities and misconfigurations across AWS and Google Workspace are getting fixed by your own hands, not documented and queued, and the riskiest gaps you inherited are closed
Benefits
Medical
Dental
Vision
Life insurance
Disability insurance
Commuter benefit plan
401k
Flex spending accounts
Support for continuing education and professional development
Training, development, and networking opportunities via Sales Assembly
Flexible PTO
Onsite gym membership
Company-provided lunch each month
Daily snacks
Sodas, unlimited flavored water, & coffee
Preferred experience
Threat modeling experience across systems, processes, or vendor implementations
Hands-on experience running a modern EDR program: building and tuning detection logic, writing response runbooks, and leading investigations through to containment
The ability to explain security risk to non-technical audiences in terms they can act on, so people across the company bring you problems early rather than working around you
AWS security experience across IAM, network controls, logging, and configuration management, with a track record of remediating findings directly
Identity and access management depth: defining access control requirements, designing RBAC models, and running access reviews in an SSO environment
A track record of holding teams accountable for security findings and driving remediation through to completion
Endpoint security experience across managed and BYOD fleets, including device posture, hardening baselines, and MDM
Comfort working in infrastructure-as-code environments and automating security tasks
5+ years in security operations, detection and response, or security engineering
A record of fast, reliable responsiveness on security requests, whether that’s a ticket queue or someone asking a question in a channel
Experience working alongside IT on shared systems, setting security requirements
Terraform and CI/CD pipeline experience
Zero trust networking experience, including designing or operating identity-aware and device-aware access controls
Working knowledge of NIST, ISO 27001, SOC 2, and SOX, and how regulatory compliance translates into engineering requirements
Experience securing a fully remote workforce
Experience building security awareness or training programs for a non-technical audience
Google Workspace security administration experience
Security certifications such as AWS Certified Security Specialty, GCIH, or GCIA
Recruitment process
Deadline to Apply: 15 October 2026 at 06:00 BST
While our recruiting team uses AI tools for efficiency, resumes are still screened by Kin’s in-house recruiters, and candidate evaluations and hiring decisions are made by recruiters and hiring teams. Rest assured, real people make real decisions
The hiring process and timeline for each role will vary, depending on the position. However, here are some things you can expect from us:
Prompt updates and feedback following interviews
Interviews with recruiters, hiring managers, and members of teams
Skills assessment relevant to the position, if applicable
Genuine, thoughtful human interaction at every step
