Security Engineer

Kodex • ,

7d • $140,000 - $170,000 • Remote

About The Position

Kodex is hiring a Security Engineer to own and expand the company’s security program as it scales. The role takes over CorpSec, SecOps, and compliance responsibilities and builds out the practice across CloudSec and AppSec. This is a hands-on, high-autonomy operator position on a small team, responsible for developing playbooks, managing response, owning security tooling, and leading the next SOC 2 audit largely independently. The position is U.S.-based and remote.

Requirements

• 4–6 years of security engineering experience, ideally at a startup or a company with fewer than 200 people.
• Experience building security programs from scratch and making independent decisions in ambiguous situations.
• Experience securing a Mac-first environment, including Mac fleet security, MDM, and Apple-native tooling.
• Depth in CorpSec and SecOps, including detection engineering, incident response, phishing defense, and endpoint security.
• Experience owning or substantially contributing to a SOC 2 audit cycle.
• Comfort with Datadog, SentinelOne, Okta, Google Workspace, and Vanta, or close analogues.
• Practical security judgment focused on real threats and trade-offs.
• Excellent communication skills, including writing clear playbooks and explaining reasoning to non-security stakeholders.

Nice To Haves

• Computer science degree.
• CISSP, CISM, or OSCP certification.
• Prior DevOps or platform engineering experience followed by a transition into security.
• Experience conducting third-party security reviews and managing vendor risk.
• Experience with detection engineering at scale, including Datadog or SIEM authoring.

Responsibilities

• Own detection, response, and prevention across the company’s Mac-first environment.
• Run and refine the SentinelOne stack, phishing and email-security defenses, and incident response playbooks.
• Drive the SOC 2 and Vanta program, serving as the primary technical owner for the January–February audit cycle.
• Manage Okta, Google Workspace, and access-management guardrails, enforcing least privilege as the company grows.
• Use Datadog and SentinelOne to address visibility gaps and build alerts and dashboards that surface meaningful signals.
• Manage security reviews of vendors and integrations, and maintain Vanta as the source of truth.
• Build security culture through clear documentation, practical training, and usable playbooks.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed