[Hiring] Senior Security Engineer @Kin Insurance

Role Description

Own endpoint detection and cloud security at a fully cloud-based company. Tune out the noise, lock down AWS, and build security champions across Kin. 5+ years.

Your Responsibilities

• Own and tune our EDR/MDR stack, building the detection policies, runbooks, and automation that keep escalations focused on real threats.
• Lead incident response end to end: investigation, containment, and remediation, from compromised laptops to cloud and identity incidents.
• Own endpoint security across managed and BYOD devices, setting device posture standards, hardening baselines, and the policies that govern what can access Kin data.
• Define the security requirements behind our identity program and partner with IT to implement them in SSO, shaping our RBAC model and driving an access review cadence that removes stale permissions.
• Build and remediate security controls across AWS infrastructure, Google Workspace, identity, and data protection.
• Serve as the front door for security across Kin, turning around security tickets and questions quickly enough that people bring you things early instead of working around the process.
• Conduct threat modeling across systems, processes, and vendor implementations, delivering risk assessments teams can act on.
• Instill a culture of security across the company, taking everyday opportunities to educate Kinfolk, raise awareness of real risks, and give people in every function the judgment to make safer decisions on their own.

Success in This Role

• Detection is tuned and backed by runbooks, so the team's hours go toward investigating real threats instead of triaging noise.
• A clear device posture standard exists, managed devices meet it, and access reviews run with IT on a predictable cadence instead of being a scramble before an audit.
• Cloud vulnerabilities and misconfigurations across AWS and Google Workspace are getting fixed by your own hands, not documented and queued, and the riskiest gaps you inherited are closed.

Qualifications

• 5+ years in security operations, detection and response, or security engineering.
• Hands-on experience running a modern EDR program: building and tuning detection logic, writing response runbooks, and leading investigations through to containment.
• Endpoint security experience across managed and BYOD fleets, including device posture, hardening baselines, and MDM.
• Identity and access management depth: defining access control requirements, designing RBAC models, and running access reviews in an SSO environment.
• AWS security experience across IAM, network controls, logging, and configuration management, with a track record of remediating findings directly.
• Comfort working in infrastructure-as-code environments and automating security tasks.
• Threat modeling experience across systems, processes, or vendor implementations.

Collaboration and Communication

• A record of fast, reliable responsiveness on security requests, whether that's a ticket queue or someone asking a question in a channel.
• Experience working alongside IT on shared systems, setting security requirements.
• A track record of holding teams accountable for security findings and driving remediation through to completion.
• The ability to explain security risk to non-technical audiences in terms they can act on, so people across the company bring you problems early rather than working around you.

Bonus If You Have

• Terraform and CI/CD pipeline experience.
• Zero trust networking experience, including designing or operating identity-aware and device-aware access controls.
• Working knowledge of NIST, ISO 27001, SOC 2, and SOX, and how regulatory compliance translates into engineering requirements.
• Experience securing a fully remote workforce.
• Experience building security awareness or training programs for a non-technical audience.
• Google Workspace security administration experience.
• Security certifications such as AWS Certified Security Specialty, GCIH, or GCIA.

How We Hire

We believe a great hiring experience should be clear, respectful, and human. We’ll accept applications for this position until October 15, 2026. While our recruiting team uses AI tools for efficiency, resumes are still screened by Kin’s in-house recruiters, and candidate evaluations and hiring decisions are made by recruiters and hiring teams. Rest assured, real people make real decisions.

• Prompt updates and feedback following interviews.
• Interviews with recruiters, hiring managers, and members of teams.
• Skills assessment relevant to the position, if applicable.
• Genuine, thoughtful human interaction at every step.

How We Support You

We offer a comprehensive, competitive benefits program, allowing you to choose the benefits that are best for you and your family, starting on the first day of the month following your start date.

Core Benefits

• Competitive salary and company equity through Restricted Stock Units (RSUs), granted as part of our standard compensation package and based on role and level.
• 401(k) with company match up to 4% of eligible earnings.
• Multiple medical plan options, plus dental and vision coverage.
• Company-funded HSA contributions (based on medical plan selection).
• Company-paid life insurance and short-term disability.

Health & Wellbeing

• A variety of supplemental benefit options, including long-term disability, critical illness, accident, legal, and pet insurance.
• Access to mental health support and confidential counseling resources.
• Flexible PTO for exempt employees (most employees take 15–20 days per year), plus 8 company-observed holidays.
• Paid parental leave, including up to 14 weeks at 100% pay for birthing parents and 8 weeks at 100% pay for non-birthing parents.

Growth & Development

• Career mobility and internal growth opportunities across the organization.
• Professional development budgets for certifications, conferences, and learning available, subject to management approval.

How We Work

We don’t just hire for skills. We hire for alignment. Kinfolk bring diverse perspectives, but we’re united by a shared set of values that shape how we work and how we show up for each other and our customers.

• Run through walls, together.
• Raise the bar. Drop the ego.
• Act like an owner.
• Operate lean. Deliver more.
• Keep asking ‘What if?’

Where We Work

We are a remote-first company with offices in Chicago, IL and St. Petersburg, FL where teams can come together for collaboration.

EEOC Statement

Kin is proud to be an Equal Employment Opportunity and Affirmative Action Employer. We don't just accept difference – we honor it, nurture it, and celebrate it. We don’t discriminate based on race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Kin welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. If you require accommodation, please contact us by sending an email to [email protected].