[Hiring] Security Engineer @Kami

Role Description

As a Security Engineer at Kami, you won't just be identifying risks and writing reports—you will be the one actively fixing them. We are expanding our in-house security team and need a hands-on engineer who thrives on pure engineering remediation. In this role, you will leverage our automated security tools, scanning platforms, and risk/vulnerability processes to pinpoint faults and defects across our systems and applications.

Instead of just passing off a ticket, you will jump directly into the codebase to patch those vulnerabilities, refactor out-of-life or legacy code, upgrade outdated libraries and dependencies to ensure our environment is secure and modernized. You will act as a core technical resource for the broader engineering team, writing clear security documentation and playbooks, and actively assisting and guiding developers to successfully remediate defects within their own workflows.

You will be the ultimate bridge between automated threat detection and active engineering execution, embedding robust security guardrails directly into our software development life cycle. If you are a builder who loves deep, code-level troubleshooting, enjoys replacing stale legacy infrastructure with secure code, and wants to protect a platform supporting over 50 million global users, this is the perfect place to make a massive impact.

Qualifications

• 5-8+ years of experience in an Application Security or Security Engineering role.
• Proven experience managing technical debt and identifying out-of-life or legacy code paths.
• Excellent written skills with a knack for building clean security playbooks.
• Familiarity with cloud-native architectures, containerized applications, CI/CD integrations.
• Exposure to application security fundamentals, specifically with OWASP.

Requirements

• Utilize automated scanners and internal risk processes to hunt down defects.
• Collaborate actively with engineering pods, reviewing their security posture.
• Draft comprehensive, easy-to-follow security playbooks and coding standards guidelines.
• Embed automated security scanning tools and analysis processes inside the active software development lifecycle.
• Implement and maintain robust cloud infrastructure protections.
• Manage and execute the emergency incident response lifecycle.

Benefits

• A people-first employer on an inspiring mission to build the future of education.
• High calibre and diverse team ranging from successful startup veterans to Fortune 500 professionals.
• Continuous learning and development opportunities, including subsidised course fees and free access to Udemy.
• The satisfaction of knowing you’re helping modern-day superheroes, aka teachers.
• Helping thousands of schools worldwide through the digital transformation of education.
• Already used by 70M users in 175 countries, one of the most popular EdTech platforms worldwide.