Kodex is hiring a Security Engineer to own the security program end-to-end as we scale. You'll take over CorpSec, SecOps, and compliance responsibilities from our current lead (who's moving into a broader platform role) and build out the practice across CloudSec and AppSec as we grow.

This is a hands-on, zero-to-one operator seat on a small team. You'll write the playbooks, run the response, own the tooling, and drive our next SOC 2 audit largely independently. High autonomy, high leverage, and real ownership of decisions that shape how a fast-growing Series A company protects itself and its customers.

This is a U.S.-based remote role.

CorpSec & SecOps: Own detection, response, and prevention across our Mac-first environment. Run and refine the SentinelOne stack, phishing / email-security defense, and incident response playbooks.

Compliance & Audit: Drive our SOC 2 / Vanta program. Own the January–February audit cycle as the primary technical owner.

Identity & Access: Own Okta, Google Workspace, and access-management guardrails. Keep least-privilege enforced as we grow.

Detection & Observability: Use Datadog and SentinelOne to close visibility gaps; build alerts and dashboards that surface real signal.

Vendor & Third-Party Risk: Manage security review of vendors and integrations; keep Vanta accurate as the source of truth.

Security Culture: Bring the team along — clear docs, practical training, and playbooks that people actually use.

4–6 years of security engineering experience, ideally at a startup or small (Hands-on, zero-to-one operator — you've built security programs from scratch and made independent judgment calls in ambiguity

Mac-first environment experience — you've owned Mac fleet security, MDM, and Apple-native tooling

CorpSec + SecOps depth — detection engineering, incident response, phishing defense, endpoint security

Security Engineer

Responsibilities

Qualification

Required

Preferred

Company

Kodex

More roles at Kodex