Senior Security Engineer

kin; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Kin is hiring a Senior Security Engineer to run security operations in a fully cloud-based, remote-first environment. You will own our EDR/MDR stack, drive detection tuning, and build runbooks to keep a lean team focused on real threats.

You will lead incident response from initial alert through containment and remediation, and define security controls across AWS and our identity framework in collaboration with IT. You will educate Kinfolk on secure decisions and strengthen data protection.

Qualifications

• 5+ years of security engineering or equivalent.
• Experience tuning EDR/MDR stacks and building runbooks.
• Hands-on in AWS security, IAM and identity controls.
• Proficient in incident response lifecycle and containment.
• Ability to educate teams on secure decision making.

Responsibilities

• Own and tune the EDR/MDR stack, build detection policies and automation.
• Lead end-to-end incident response: investigation, containment, remediation.
• Own endpoint security across managed and BYOD devices with posture standards.
• Define security requirements for identity program and SSO integration.
• Build and remediate security controls across AWS and data protection.
• Serve as front door for security across Kin and accelerate response times.
• Conduct threat modeling and deliver actionable risk assessments.
• Foster a culture of security awareness across the company.

Skills

EDR/MDR

Incident response

Endpoint security

Threat modeling

Cloud security

Security operations

Job description

Quick Summary

Own endpoint detection and cloud security at a fully cloud-based company. Tune out the noise, lock down AWS, and build security champions across Kin. 5+ years.

Who we are

Kin makes life simpler, more affordable, and better for homeowners - especially in the places where climate risks, rising costs, and outdated systems make it harder. We start with smarter homeowners insurance and expand to everything homeowners need to thrive.

Using data, technology, and thoughtful human support, we're building products that are clear, fair, and help homeowners feel confident - so homeowners aren't left behind when they need help most.

Founded in 2016, Kin is a remote-first employer with Kinfolk across more than 35 states. We serve customers in 14 states (and counting). Our disciplined growth, strong customer satisfaction, and focus on long-term sustainability fosters outstanding growth, attracts marquee investors, and earns recognition and accolades, including:

Built In Chicago's Best Places to Work, Midsize Companies (2021-2026)

Forbes' America's Best Startup Employers (2026)

Inc. 5000 Fastest-Growing Private Companies

Forbes' Fintech 50 (2023-2026)

Great Places to Work Certified (May 2024-May 2027)

Most importantly, we're building Kin to be a place where people do meaningful work with real impact - for our customers, our communities, and each other. We're excited to tell you more about how you can contribute to our rapid growth, strong unit economics, profitability, and excellent customer ratings. To learn more about how we work and what we're building, visit kin.com and see how we work .

The opportunity

We're looking for a Senior Security Engineer to run security operations at Kin. We're remote-first and fully cloud-based, with Kinfolk across more than 35 states working from company laptops and personal devices, signing into everything through SSO. That makes endpoints and identity our front line. Who has access to what, which devices are allowed to touch our data, and how fast we catch it when something goes wrong are the questions this role answers every day.

This is a hands-on role, not a consultative one. You'll own our EDR/MDR stack and the detection tuning, runbooks, and automation that keep a lean team focused on real threats. You'll run endpoint security across managed laptops and BYOD, partner with IT to define the access controls and identity policies that govern our SSO environment, and lead incident response from first alert through containment. You'll also work directly in AWS, building and remediating cloud security controls. And you'll be the person Kinfolk come to with security questions, answering fast enough that people ask rather than guess. Customers trust us with their claims, their property details, and their financial information. Protecting that is the work.

Your responsibilities

• Own and tune our EDR/MDR stack, building the detection policies, runbooks, and automation that keep escalations focused on real threats
• Lead incident response end to end: investigation, containment, and remediation, from compromised laptops to cloud and identity incidents
• Own endpoint security across managed and BYOD devices, setting device posture standards, hardening baselines, and the policies that govern what can access Kin data
• Define the security requirements behind our identity program and partner with IT to implement them in SSO, shaping our RBAC model and driving an access review cadence that removes stale permissions
• Build and remediate security controls across AWS infrastructure, Google Workspace, identity, and data protection
• Serve as the front door for security across Kin, turning around security tickets and questions quickly enough that people bring you things early instead of working around the process
• Conduct threat modeling across systems, processes, and vendor implementations, delivering risk assessments teams can act on
• Instill a culture of security across the company, taking everyday opportunities to educate Kinfolk, raise awareness of real risks, and give people in every function the judgment to make safer decisions on their own

Success in this role

In your first 6-12 months at Kin, success is less about checking boxes and more about the impact you create. You'll use your skills and judgment to take ownership of meaningful work, improve how we operate, and help move Kin's mission forward. Along the way, you'll deliver outcomes that make a real difference for both Kinfolk and the homeowners we serve.

By the end of your first year, you should feel confident in your role, trusted as an owner, and proud of the progress you've helped make.

Detection is tuned and backed by runbooks, so the team's hours go toward investigating real threats instead of triaging noise

A clear device posture standard exists, managed devices meet it, and access reviews run with IT on a predictable cadence instead of being a scramble before an audit

Cloud vulnerabilities and misconfigurations acro