Senior Security Engineer

QUICK SUMMARY Own endpoint detection and cloud security at a fully cloud-based company. Tune out the noise, lock down AWS, and build security champions across Kin. 5+ years. WHO WE ARE Kin makes life simpler, more affordable, and better for homeowners — especially in the places where climate risks, rising costs, and outdated systems make it harder. We start with smarter homeowners insurance and expand to everything homeowners need to thrive. Using data, technology, and thoughtful human support, we’re building products that are clear, fair, and help homeowners feel confident — so homeowners aren’t left behind when they need help most. Founded in 2016, Kin is a remote-first employer with Kinfolk across more than 35 states. We serve customers in 14 states (and counting). Our disciplined growth, strong customer satisfaction, and focus on long-term sustainability fosters outstanding growth, attracts marquee investors, and earns recognition and accolades, including: - Built In Chicago's Best Places to Work, Midsize Companies (2021-2026) - Forbes' America's Best Startup Employers (2026) - Inc. 5000 Fastest-Growing Private Companies - Forbes’ Fintech 50 (2023-2026) - Great Places to Work Certified (May 2024-May 2027) Most importantly, we’re building Kin to be a place where people do meaningful work with real impact — for our customers, our communities, and each other. We're excited to tell you more about how you can contribute to our rapid growth, strong unit economics, profitability, and excellent customer ratings. To learn more about how we work and what we’re building, visit kin.com http://kin.com and see how we work https://www.linkedin.com/company/kin-insurance/life/kin/. THE OPPORTUNITY We're looking for a Senior Security Engineer to run security operations at Kin. We're remote-first and fully cloud-based, with Kinfolk across more than 35 states working from company laptops and personal devices, signing into everything through SSO. That makes endpoints and identity our front line. Who has access to what, which devices are allowed to touch our data, and how fast we catch it when something goes wrong are the questions this role answers every day. This is a hands-on role, not a consultative one. You'll own our EDR/MDR stack and the detection tuning, runbooks, and automation that keep a lean team focused on real threats. You'll run endpoint security across managed laptops and BYOD, partner with IT to define the access controls and identity policies that govern our SSO environment, and lead incident response from first alert through containment. You'll also work directly in AWS, building and remediating cloud security controls. And you'll be the person Kinfolk come to with security questions, answering fast enough that people ask rather than guess. Customers trust us with their claims, their property details, and their financial information. Protecting that is the work. YOUR RESPONSIBILITIES - Own and tune our EDR/MDR stack, building the detection policies, runbooks, and automation that keep escalations focused on real threats - Lead incident response end to end: investigation, containment, and remediation, from compromised laptops to cloud and identity incidents - Own endpoint security across managed and BYOD devices, setting device posture standards, hardening baselines, and the policies that govern what can access Kin data - Define the security requirements behind our identity program and partner with IT to implement them in SSO, shaping our RBAC model and driving an access review cadence that removes stale permissions - Build and remediate security controls across AWS infrastructure, Google Workspace, identity, and data protection - Serve as the front door for security across Kin, turning around security tickets and questions quickly enough that people bring you things early instead of working around the process - Conduct threat modeling across systems, processes, and vendor implementations, delivering risk assessments teams can act on - Instill a culture of security across the company, taking everyday opportunities to educate Kinfolk, raise awareness of real risks, and give people in every function the judgment to make safer decisions on their own Success in this role In your first 6–12 months at Kin, success is less about checking boxes and more about the impact you create. You’ll use your skills and judgment to take ownership of meaningful work, improve how we operate, and help move Kin’s mission forward. Along the way, you’ll deliver outcomes that make a real difference for both Kinfolk and the homeowners we serve. By the end of your first year, you should feel confident in your role, trusted as an owner, and proud of the progress you’ve helped make. - Detection is tuned and backed by runbooks, so the team's hours go toward investigating real threats instead of triaging noise - A clear device posture standard exists, managed devices meet it, and access reviews run with IT on a predictable cadence instead of being a scramble before an audit - Cloud vulnerabilities and misconfigurations across AWS and Google Workspace are getting fixed by your own hands, not documented and queued, and the riskiest gaps you inherited are closed   WHAT YOU’LL BRING Technical - 5+ years in security operations, detection and response, or security engineering - Hands-on experience running a modern EDR program: building and tuning detection logic, writing response runbooks, and leading investigations through to containment - Endpoint security experience across managed and BYOD fleets, including device posture, hardening baselines, and MDM - Identity and access management depth: defining access control requirements, designing RBAC models, and running access reviews in an SSO environment - AWS security experience across IAM, network controls, logging, and configuration management, with a track record of remediating findings directly - Comfort working in infrastructure-as-code environments and automating security tasks - Threat modeling experience across systems, processes, or vendor implementations Collaboration and communication - A record of fast, reliable responsiveness on security requests, whether that's a ticket queue or someone asking a question in a channel - Experience working alongside IT on shared systems, setting security requirements - A track record of holding teams accountable for security findings and driving remediation through to completion - The ability to explain security risk to non-technical audiences in terms they can act on, so people across the company bring you problems early rather than working around you Bonus if you have - Terraform and CI/CD pipeline experience - Zero trust networking experience, including designing or operating identity-aware and device-aware access controls - Working knowledge of NIST, ISO 27001, SOC 2, and SOX, and how regulatory compliance translates into engineering requirements - Experience securing a fully remote workforce - Experience building security awareness or training programs for a non-technical audience - Google Workspace security administration experience - Security certifications such as AWS Certified Security Specialty, GCIH, or GCIA HOW WE HIRE We believe a great hiring experience should be clear, respectful, and human. We’ll accept applications for this position until October 15, 2026. While our recruiting team uses AI tools for efficiency, resumes are still screened by Kin’s in-house recruiters, and candidate evaluations and hiring decisions are made by recruiters and hiring teams. Rest assured, real people make real decisions. The hiring process and timeline for each role will vary, depending on the position. However, here are some things you can expect from us: - Prompt updates and feedback following interviews - Interviews with recruiters, hiring managers, and members of teams - Skills assessment relevant to the position, if applicable - Genuine, thoughtful human interaction at every step HOW WE SUPPORT YOU We offer a comprehensive, competitive benefits program, allowing you to choose the benefits that are best for you and your family, starting on the first day of the month following your start date. Core Benefits - Competitive salary and company equity through Restricted Stock Units (RSUs), granted as part of our standard compensation package and based on role and level - 401(k) with company match up to 4% of eligible earnings - Multiple medical plan options, plus dental and vision coverage - Company-funded HSA contributions (based on medical plan selection) - Company-paid life insurance and short-term disability Health & Wellbeing - A variety of supplemental benefit options, including long-term disability, critical illness, accident, legal, and pet insurance - Access to mental health support and confidential counseling resources - Flexible PTO for exempt employees (most employees take 15–20 days per year), plus 8 company-observed holidays - Paid parental leave, including up to 14 weeks at 100% pay for birthing parents and 8 weeks at 100% pay for non-birthing parents Growth & Development - Career mobility and internal growth opportunities across the organization - Professional development budgets for certifications, conferences, and learning available, subject to management approval HOW WE WORK We don’t just hire for skills. We hire for alignment. Kinfolk bring diverse perspectives, but we’re united by a shared set of values that shape how we work and how we show up for each other and our customers. Run through walls, together - Every one of us is responsible for creating the culture we want to work in. High performance. Low drama. Always respectful. We assume the best in each other and challenge ideas, not intentions. We show up, work hard, and play to each other's strengths — because that’s how great teams win. Raise the bar. Drop the ego - Attitudes are contagious. Every one of us is responsible for creating the culture we want to work in. High performance. Low drama. Always respectful. Like professional sports teams, we win by working in sync. We show up, work hard, and play to each other’s strengths. Act like an owner - We are owners, fully accountable for achieving Kin’s mission. That requires positive, proactive, big-picture thinking well beyond our job descriptions. Ask questions, Take ownership. Do the right thing, even when it‘s hard. Because when Kin thrives, so do you. And so do our customers. Operate lean. Deliver more - We build efficiency into everything we do. Each dollar we save gets reinvested to deliver more to our customers: better pricing, more products, and new innovations. We work smarter by relentlessly prioritizing and using technology, including AI, to multiply our impact. Lean is about focus, not deprivation. Lean isn't a limitation — it's our competitive advantage. Keep asking ‘What if?’ - We value curiosity. To make insurance better for our customers, we experiment. We embrace insights. And we base decisions on data rather than assumptions. We see setbacks as opportunities for growth and are always learning and improving. Both individually and as a company. WHERE WE WORK We are a remote-first company with offices in Chicago, IL and St. Petersburg, FL where teams can come together for collaboration. For Sales Agents and Customer Service Agents: These roles sit in any of the following 32 states: AL, AZ, CO, FL, ID, IL, IN, KS, KY, LA, MA, MD, ME, MI, MO, MT, NC, NE, NM, NV, NY, OH, OK, PA, SC, TN, TX, UT, VT, VA, WA, and WI. For all other positions, these roles can sit in any of the following 41 states: AL, AR, AZ, CA (exempt only), CO, CT, FL, GA, ID, IL, IN, IA, KS, KY, LA, MA, ME, MD, MI, MN, MO, MT, NC, NE, NJ, NM, NV, NY, OH, OK, OR, PA, SC, SD, TN, TX, UT, VT, VA, WA, and WI. Please only apply if you are able to live and work full-time in one of the states listed above. For remote technical positions located in Canada, we are only able to hire individuals who reside in Ontario. Applicants must be able to live and work full-time in Ontario to be considered. State locations and specifics are subject to change as our hiring requirements shift. EEOC STATEMENT Kin is proud to be an Equal Employment Opportunity and Affirmative Action Employer. We don't just accept difference – we honor it, nurture it, and celebrate it. We don’t discriminate based on race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Kin welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. If you require accommodation, please contact us by sending an email to careers@kin.com