Remote Senior Product Security Engineer

Description:

• Kin is seeking a Senior Product Security Engineer to enhance their security posture and collaborate with engineering teams.
• The role involves designing secure architectures, implementing security controls, and promoting DevSecOps best practices.
• Responsibilities include designing and implementing security solutions across cloud infrastructure, applications, and data protection.
• The engineer will partner with developers, DevOps, and data teams to promote secure software development practices.
• The position requires leading security architecture reviews, conducting threat modeling, and providing actionable risk assessments.
• The engineer will oversee GitHub Advanced Security (GHAS) adoption and ensure effective management of secret scanning, dependency security, and code scanning.
• Monitoring emerging threats, security trends, and compliance requirements is also part of the role.
• Mentoring engineers on threat modeling, secure coding, and cloud security best practices is expected.
• The engineer will act as a Security Champion, advocating for security best practices across the organization.
• Engaging teams to foster a security-first mindset and embedding security in daily operations is crucial.

Requirements:

• Candidates must have 5+ years of experience in security engineering, cloud security, or DevSecOps.
• Strong expertise in AWS security, Terraform, CI/CD pipelines, and automation is required.
• Experience with Docker, Kubernetes (EKS), and cloud security controls (IAM, VPCs, WAF, etc.) is necessary.
• Proficiency in at least one programming language, such as Python or Ruby, is needed.
• Familiarity with security frameworks (NIST, ISO 27001) and regulatory compliance is essential.
• Proven experience in threat modeling and early identification of security risks in the development process is required.
• Candidates must demonstrate the ability to hold engineering teams accountable for security findings and drive vulnerability management efforts.
• Hands-on experience with GitHub Advanced Security (GHAS) and secure development practices is necessary.
• Excellent communication and problem-solving skills are required.
• A Bachelor’s degree along with certifications, technical training, or relevant audit and compliance work experience is mandatory.

Benefits:

• Kin offers a fully remote work environment for this position.
• Employees are part of a mission-driven company focused on changing the home insurance landscape.
• The company has received accolades such as being named to Built In Chicago's Best Places to Work and Forbes' America's Best Startup Employers.
• Kin provides opportunities for professional growth and development within a supportive team.
• Employees are encouraged to foster a security-first mindset and contribute to a culture of innovation and excellence.