Note: The job is a remote job and is open to candidates in USA. Kodex is hiring a Security Engineer to own and expand its security program as the company scales. The role leads CorpSec, SecOps, compliance, cloud and application security, including incident response, access management, SOC 2 audits, detection, vendor risk, and security culture.
Responsibilities
- CorpSec & SecOps: Own detection, response, and prevention across our Mac-first environment. Run and refine the SentinelOne stack, phishing / email-security defense, and incident response playbooks
- Compliance & Audit: Drive our SOC 2 / Vanta program. Own the January–February audit cycle as the primary technical owner
- Identity & Access: Own Okta, Google Workspace, and access-management guardrails. Keep least-privilege enforced as we grow
- Detection & Observability: Use Datadog and SentinelOne to close visibility gaps; build alerts and dashboards that surface real signal
- Vendor & Third-Party Risk: Manage security review of vendors and integrations; keep Vanta accurate as the source of truth
- Security Culture: Bring the team along — clear docs, practical training, and playbooks that people actually use
Skills
- 4–6 years of security engineering experience, ideally at a startup or small (< 200 person) company
- Hands-on, zero-to-one operator — you've built security programs from scratch and made independent judgment calls in ambiguity
- Mac-first environment experience — you've owned Mac fleet security, MDM, and Apple-native tooling
- CorpSec + SecOps depth — detection engineering, incident response, phishing defense, endpoint security
- SOC 2 experience — you've owned or contributed heavily to a SOC 2 audit cycle
- Comfortable with our stack: Datadog, SentinelOne, Okta, Google Workspace, Vanta (or close analogues)
- Practical security thinking — you think about real threats and real trade-offs, not trivia
- Excellent communication — you can write clear playbooks and explain your reasoning to non-security stakeholders
- CS degree
- CISSP, CISM, or OSCP
- Prior DevOps or platform engineering background that transitioned into security
- Experience running third-party security reviews and vendor risk
- Detection engineering at scale (Datadog / SIEM authoring)
Benefits
- Offers equity
- U.S.-based remote role
Company Overview