Security Engineer

Kodex; Oregon; Híbrido; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

Kodex is seeking a Security Engineer to own the security program end-to-end as we scale. This is a hands-on, zero-to-one operator seat on a small team with high autonomy and ownership of CorpSec, SecOps, and compliance across CloudSec and AppSec.

The role is remote for a U.S.-based team, with responsibilities including SOC 2 readiness, incident response, and security tooling management. You will influence how a fast-growing company protects itself and its customers.

Qualificações

• 4–6 years of security engineering experience in startups/small teams.
• Hands-on, zero-to-one operator with experience building security programs from scratch.
• Mac-first environment security experience including Mac fleet security, MDM and Apple tooling.
• CorpSec + SecOps depth: detection engineering, incident response, phishing defense, endpoint security.
• SOC 2 experience: ownership or heavy contribution to audit cycles.
• Familiar with Datadog, SentinelOne, Okta, Google Workspace, Vanta stack.
• Practical security thinking and risk-based decision making.
• Excellent written and verbal communication for playbooks and stakeholder explanations.

Responsabilidades

• CorpSec & SecOps: detection, response, prevention across a Mac-first environment; manage SentinelOne, phishing defense and incident response playbooks.
• Compliance & Audit: drive SOC 2 / Vanta program and own the audit cycle as technical owner.
• Identity & Access: manage Okta and Google Workspace; enforce least privilege as we scale.
• Detection & Observability: use Datadog and SentinelOne to close visibility gaps; build alerts and dashboards.
• Vendor & Third-Party Risk: security reviews of vendors and integrations; maintain Vanta as truth source.
• Security Culture: document playbooks clearly and train the team with practical guidance.

Conhecimentos

Security engineering

Hands-on security

Mac security

CorpSec/SecOps

SOC 2 experience

Communication

Formação académica

CS degree

Ferramentas

Datadog

SentinelOne

Okta

Google Workspace

Vanta

Descrição da oferta de emprego

About the company

Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors including Andreessen Horowitz, Y Combinator, Peak XV and Thiel Capital, Kodex has become the industry standard for secure data exchange. Our platform supports over 15,000 government agencies in 190 countries and is trusted by industry leaders like Coinbase, Stripe, and AT&T. By transforming a traditionally complex and manual process into a streamlined digital workflow, Kodex helps organizations strengthen compliance, enhance security, and reduce operational costs by millions each year. We bridge the gap between companies and authorized requestors, ensuring that sensitive data is handled with uncompromising security, transparency, and efficiency.

The Role

Kodex is hiring a Security Engineer to own the security program end-to-end as we scale. You'll take over CorpSec, SecOps, and compliance responsibilities from our current lead (who's moving into a broader platform role) and build out the practice across CloudSec and AppSec as we grow. This is a hands-on, zero-to-one operator seat on a small team. You'll write the playbooks, run the response, own the tooling, and drive our next SOC 2 audit largely independently. High autonomy, high leverage, and real ownership of decisions that shape how a fast-growing Series A company protects itself and its customers. This is a U.S.-based remote role.

Key Responsibilities

• CorpSec & SecOps: Own detection, response, and prevention across our Mac-first environment. Run and refine the SentinelOne stack, phishing / email-security defense, and incident response playbooks.
• Compliance & Audit: Drive our SOC 2 / Vanta program. Own the January-February audit cycle as the primary technical owner.
• Identity & Access: Own Okta, Google Workspace, and access-management guardrails. Keep least-privilege enforced as we grow.
• Detection & Observability: Use Datadog and SentinelOne to close visibility gaps; build alerts and dashboards that surface real signal.
• Vendor & Third-Party Risk: Manage security review of vendors and integrations; keep Vanta accurate as the source of truth.
• Security Culture: Bring the team along — clear docs, practical training, and playbooks that people actually use.

What You Bring

• 4-6 years of security engineering experience , ideally at a startup or small (< 200 person) company
• Hands-on, zero-to-one operator — you've built security programs from scratch and made independent judgment calls in ambiguity
• Mac-first environment experience — you've owned Mac fleet security, MDM, and Apple-native tooling
• CorpSec + SecOps depth — detection engineering, incident response, phishing defense, endpoint security
• SOC 2 experience — you've owned or contributed heavily to a SOC 2 audit cycle
• Comfortable with our stack: Datadog, SentinelOne, Okta, Google Workspace, Vanta (or close analogues)
• Practical security thinking — you think about real threats and real trade-offs, not trivia
• Excellent communication — you can write clear playbooks and explain your reasoning to non-security stakeholders

Nice to have

• CS degree
• CISSP or CISM
• Prior DevOps or platform engineering background that transitioned into security
• Experience running third-party security reviews and vendor risk
• Detection engineering at scale (Datadog / SIEM authoring)

Equal Employment Opportunities at the Company

Kodex is committed to hiring talented and qualified individuals with diverse backgrounds for all of its tech, non-tech, and leadership roles. Kodex believes that the gathering and celebration of unique backgrounds, qualities, and cultures enriches the workplace.