Kin Senior Security Engineer - App Sec at Kin advises developers on secure design and fixes vulnerabilities in code and cloud infrastructure. The role leads secure code and architecture reviews and drives vulnerability remediation.
Responsibilities
We’re looking for a Sr Security Engineer with a focus on application security to help us ship fast and ship securely. Security needs to scale with engineering rather than slow it down. In this hands-on role, you’ll advise developers on secure design, review code and architecture before it ships, and get into the code yourself to fix vulnerabilities and collaborate on hardening systems at the source, across both our applications and our cloud infrastructure.
Everything in security is moving fast, and this role calls for someone who stays a step ahead. You’ll track what’s emerging across application, code, and AI security and act on it before it becomes a problem, building the tooling, automation, and relationships that scale your impact. Your work will directly strengthen the security of the platform customers trust with their data.
Your responsibilities
Own vulnerability remediation across engineering, driving findings to resolution and enforcing remediation SLAs
Write and ship code to harden Kin systems, working alongside developers to resolve and prevent issues at the source
Lead secure code reviews and architecture reviews, identifying risks early and delivering actionable recommendations
Partner with developers on dependency and supply chain security, leading the response and hands-on remediation when critical vulnerabilities emerge in third-party packages
Build security tooling and automation to scale detection, triage, and remediation
Identify and collaborate on remediation of cloud vulnerabilities across AWS environments and Terraform-managed infrastructure
Proactively engage engineering teams and lead threat modeling with to surface security risks early in the development process
Monitor emerging threats across application, code, and AI security, translating them into proactive remediation and guidance for engineering teams
Mentor engineers on secure coding practices and drive a security-first mindset across the organization, embedding security into day-to-day development
