Senior Application Security Engineer - Secure Dev & Cloud

Royper Royco LLC; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Kin is seeking a Senior Security Engineer focused on application security to help us ship fast and securely. You will advise developers on secure design, review code and architecture before it ships, and fix vulnerabilities directly in code across both applications and cloud infrastructure.

You will stay ahead of emerging threats, build tooling and automation to scale security, and strengthen the platform customers trust with their data.

Qualifications

• 5+ years of experience in software engineering or security engineering, including at least 1 year focused on security
• Hands-on proficiency in at least one backend programming language, with the ability to write and ship production code fixes (Ruby strongly preferred)
• Hands-on experience with SAST/DAST tools in CI/CD pipelines and turning their findings into fixes
• Experience driving vulnerability remediation at scale, including dependency and supply chain vulnerabilities, using tools such as GitHub Advanced Security
• Experience performing secure code reviews, architecture reviews, and threat modeling
• Hands-on experience securing AWS environments (IAM, VPCs, WAF) and remediating infrastructure-as-code in Terraform
• Ability to explain security concepts, risks, and tradeoffs clearly to both technical and non-technical audiences

Responsibilities

• Own vulnerability remediation across engineering, driving findings to resolution and enforcing remediation SLAs
• Write and ship code to harden Kin systems, working alongside developers to resolve and prevent issues at the source
• Lead secure code reviews and architecture reviews, identifying risks early and delivering actionable recommendations
• Partner with developers on dependency and supply chain security, leading the response and hands-on remediation when critical vulnerabilities emerge in third-party packages
• Build security tooling and automation to scale detection, triage, and remediation
• Identify and collaborate on remediation of cloud vulnerabilities across AWS environments and Terraform-managed infrastructure
• Proactively engage engineering teams and lead threat modeling with to surface security risks early in the development process
• Monitor emerging threats across application, code, and AI security, translating them into proactive remediation and guidance for engineering teams
• Mentor engineers on secure coding practices and drive a security-first mindset across the organization, embedding security into day-to-day development

Skills

5+ years of software/security eng exp

Ruby backend programming

SAST/DAST in CI/CD

Vulnerability remediation at scale

Secure code reviews & threat modeling

AWS security (IAM, VPC, WAF)

Terraform for IaC

Effective communication to tech/non-IT

Tools

GitHub Advanced Security

Terraform

Job description

Kin is seeking a Senior Security Engineer focused on application security to help us ship fast and securely. You will advise developers on secure design, review code and architecture before it ships, and fix vulnerabilities directly in code across both applications and cloud infrastructure.

You will stay ahead of emerging threats, build tooling and automation to scale security, and strengthen the platform customers trust with their data.