Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take full ownership of the security program as Kodex grows.

• Manage responsibilities related to CorpSec, SecOps, compliance, CloudSec, and AppSec.

• Oversee detection, response, and prevention in a Mac-first environment.

• Operate and enhance the SentinelOne stack, phishing/email-security defenses, and incident response playbooks.

• Lead the SOC 2/Vanta program and serve as the primary technical owner during the January–February audit cycle.

• Manage Okta, Google Workspace, and access-management protocols while enforcing the principle of least privilege.

• Utilize Datadog and SentinelOne to bridge visibility gaps and create actionable alerts and dashboards.

• Conduct security reviews of vendors and integrations, ensuring Vanta remains the definitive source of truth.

• Foster a security culture through comprehensive documentation, practical training, and user-friendly playbooks.

⛳️ Requirements

• 4–6 years of experience in security engineering, preferably in a startup or small (< 200 employees) environment.

• Hands-on, zero-to-one operational experience in developing security programs from the ground up and making independent decisions in uncertain situations.

• Expertise in Mac fleet security, MDM, and Apple-native tools.

• In-depth knowledge of CorpSec and SecOps, encompassing detection engineering, incident response, phishing defense, and endpoint security.

• Experience taking ownership or making significant contributions to a SOC 2 audit cycle.

• Familiarity with tools such as Datadog, SentinelOne, Okta, Google Workspace, Vanta, or similar alternatives.

• Practical security mindset focused on addressing real threats and evaluating trade-offs.

• Strong communication skills, capable of writing clear playbooks and articulating reasoning to non-security stakeholders.

• Must have current legal authorization to work in the United States.

• Nice to have: Bachelor's degree in Computer Science.

• Nice to have: CISSP, CISM, or OSCP certifications.

• Nice to have: Previous experience in DevOps or platform engineering transitioning into security roles.

• Nice to have: Experience conducting third-party security assessments and managing vendor risk.

• Nice to have: Skills in detection engineering at scale, including Datadog/SIEM authoring.

🏝️ Benefits

• Equity.

• Remote work.