Senior Security Engineer - App Sec

Kin Insurance•St. Petersburg, FL

2d•$141,890 - $159,650•Remote

About The Position

Kin is seeking a Senior Security Engineer focused on application security to help engineering teams ship quickly and securely. This is a hands-on role spanning applications and cloud infrastructure: advise developers on secure design, review code and architecture before release, and write code to fix vulnerabilities and harden systems. The engineer will also monitor emerging developments in application, code, and AI security, and build tooling, automation, and strong engineering partnerships to scale security impact. The role’s work directly strengthens the security of the platform customers trust with their data. Kin is a remote-first company serving homeowners through technology-enabled insurance and related products. The position may be based remotely in one of the listed eligible U.S. states; remote technical positions in Canada are limited to people residing in Ontario. Kin has offices in Chicago, Illinois, and St. Petersburg, Florida, for team collaboration. Success includes consistently meeting vulnerability response and remediation SLAs with observability, automating repetitive security work, building proactive relationships with engineering teams so security is included early in design, and proactively hardening applications and AWS infrastructure. Kin offers a competitive salary and company equity through RSUs, a benefits program, and professional development opportunities. Applications are accepted until November 30, 2026.

Requirements

At least 5 years of experience in software engineering or security engineering, including at least 1 year focused on security and substantial security expertise.
Hands-on proficiency in at least one backend programming language and ability to write and ship production code fixes.
Hands-on experience with SAST/DAST tools in CI/CD pipelines and converting their findings into fixes.
Experience driving vulnerability remediation at scale, including dependency and supply-chain vulnerabilities, using tools such as GitHub Advanced Security.
Experience performing secure code reviews, architecture reviews, and threat modeling.
Hands-on experience securing AWS environments, including IAM, VPCs, and WAF, and remediating infrastructure-as-code in Terraform.
Ability to explain security concepts, risks, and tradeoffs clearly to technical and non-technical audiences.

Nice To Haves

Ruby experience is strongly preferred.

Responsibilities

Own vulnerability remediation across engineering, driving findings to resolution and enforcing remediation SLAs.
Write and ship code to harden Kin systems, collaborating with developers to resolve and prevent issues at the source.
Lead secure code and architecture reviews, identifying risks early and providing actionable recommendations.
Partner with developers on dependency and supply-chain security, leading responses and hands-on remediation when critical third-party package vulnerabilities emerge.
Build security tooling and automation to scale detection, triage, and remediation.
Identify and collaborate on remediation of cloud vulnerabilities across AWS environments and Terraform-managed infrastructure.
Engage engineering teams proactively and lead threat modeling to surface security risks early in development.
Monitor emerging threats across application, code, and AI security and translate them into proactive remediation and engineering guidance.
Mentor engineers on secure coding practices and promote a security-first mindset by embedding security into day-to-day development.

Benefits

Competitive salary and company equity through Restricted Stock Units (RSUs), based on role and level.
401(k) with company match up to 4% of eligible earnings.
Multiple medical plan options, plus dental and vision coverage.
Company-funded HSA contributions, depending on medical plan selection.
Company-paid life insurance and short-term disability.
Supplemental benefit options including long-term disability, critical illness, accident, legal, and pet insurance.
Mental health support and confidential counseling resources.
Flexible PTO for exempt employees; most employees take 15–20 days per year.
Eight company-observed holidays.
Paid parental leave, including up to 14 weeks at 100% pay for birthing parents and 8 weeks at 100% pay for non-birthing parents.
Career mobility and internal growth opportunities.
Professional development budgets for certifications, conferences, and learning, subject to management approval.