Remote Security Engineer — CorpSec, SecOps & SOC 2

Speedrun Talent Network; United States; Teletrabalho; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

Kodex is hiring a Security Engineer to own the security program end-to-end as we scale. You will take over CorpSec, SecOps, and compliance responsibilities from the current lead and build out the practice across CloudSec and AppSec with high autonomy.

This is a hands-on, zero-to-one operator role on a small team. You will write playbooks, run the response, own tooling, and drive the next SOC 2 audit largely independently.

Qualificações

• 4–6 years of security engineering experience, startup or small company preferred.
• Hands-on operator with ability to build security programs from scratch.
• Mac-first environment experience including MDM and Apple tooling.
• CorpSec and SecOps depth covering detection, incident response, and phishing defense.
• SOC 2 audit experience or ownership of SOC 2 processes.
• Excellent written and verbal communication to explain security reasoning.

Responsabilidades

• Own detection, response and prevention across Mac-first environment; manage SentinelOne, phishing defense, incident playbooks.
• Drive SOC 2 / Vanta program; own the January–February audit cycle as technical owner.
• Manage Identity & Access with Okta and Google Workspace; enforce least-privilege controls.
• Build visibility with Datadog and SentinelOne; create alerts and dashboards.
• Oversee security reviews of vendors and integrations; maintain Vanta as truth source.
• Develop clear docs and training to raise security culture within the team.

Conhecimentos

Security engineering experience

Hands-on operator

Mac-first environment

CorpSec & SecOps depth

SOC 2 experience

Clear communication

Formação académica

CS degree

CISSP

CISM

Ferramentas

Datadog

SentinelOne

Okta

Google Workspace

Vanta

Descrição da oferta de emprego

Kodex is hiring a Security Engineer to own the security program end-to-end as we scale. You will take over CorpSec, SecOps, and compliance responsibilities from the current lead and build out the practice across CloudSec and AppSec with high autonomy.

This is a hands-on, zero-to-one operator role on a small team. You will write playbooks, run the response, own tooling, and drive the next SOC 2 audit largely independently.