Senior Security Engineer – App Sec

Kin Insurance

. Advise developers on secure design .

Posted 11/5/2026full-timeRemote • United States, CanadaSenior💰 $141,890 - $159,650 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in secure software engineering, focusing on vulnerability remediation, secure coding practices, and cloud security within AWS environments. Proficient in leading threat modeling and implementing security tooling to enhance application security and compliance.

Highest-signal resume keywords

5+ Years Experience In Software Engineering Or Security EngineeringHands-On Proficiency In RubyExperience With SAST/DAST Tools In CI/CD PipelinesExperience Securing AWS EnvironmentsExperience Remediating Infrastructure-As-Code In Terraform

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure Coding PracticesVulnerability RemediationThreat ModelingCode ReviewsProduction Code FixesDependency ManagementCloud SecurityAutomationObservabilityInfrastructure Security

Soft Skills

MentoringClear CommunicationCollaboration

Tools & Technologies

GitHub Advanced SecuritySAST ToolsDAST ToolsAWSTerraform

Industry Keywords

Application SecuritySoftware Supply Chain SecurityCI/CD PipelinesCloud VulnerabilitiesSecurity-First Mindset

Tech Stack

Tools & technologies

AWSCloudRubyTerraform

About the role

Key responsibilities & impact

Advise developers on secure design
Review code and architecture before release
Write and ship code to fix vulnerabilities and harden systems
Own vulnerability remediation across engineering and enforce remediation SLAs
Partner with developers on dependency and software supply chain security
Lead response and hands-on remediation for critical third-party package vulnerabilities
Build security tooling and automation for detection, triage, and remediation
Identify and remediate cloud vulnerabilities across AWS environments and Terraform-managed infrastructure
Lead threat modeling with engineering teams
Monitor emerging application, code, and AI security threats
Provide proactive remediation guidance to engineering teams
Mentor engineers on secure coding practices and promote a security-first mindset
Improve observability, automate repetitive security work, and proactively harden applications and AWS infrastructure

Requirements

What you’ll need

5+ years of experience in software engineering or security engineering
At least 1 year focused on security
Hands-on proficiency in at least one backend programming language
Ability to write and ship production code fixes
Ruby strongly preferred
Hands-on experience with SAST/DAST tools in CI/CD pipelines
Experience driving vulnerability remediation at scale, including dependency and supply chain vulnerabilities
Experience with tools such as GitHub Advanced Security
Experience performing secure code reviews, architecture reviews, and threat modeling
Hands-on experience securing AWS environments, including IAM, VPCs, and WAF
Experience remediating infrastructure-as-code in Terraform
Ability to explain security concepts, risks, and tradeoffs clearly to technical and non-technical audiences
Ability to live and work full-time in one of the listed eligible U.S. states, or reside in Ontario for remote technical positions located in Canada

Benefits

Comp & perks

Company equity through Restricted Stock Units (RSUs)
401(k) with company match up to 4% of eligible earnings
Multiple medical plan options
Dental and vision coverage
Company-funded HSA contributions
Company-paid life insurance and short-term disability
Supplemental long-term disability, critical illness, accident, legal, and pet insurance
Mental health support and confidential counseling resources
Flexible PTO for exempt employees (most employees take 15–20 days per year)
8 company-observed holidays
Paid parental leave, including up to 14 weeks at 100% pay for birthing parents and 8 weeks at 100% pay for non-birthing parents
Career mobility and internal growth opportunities
Professional development budgets for certifications, conferences, and learning, subject to management approval
Remote-first work arrangement
Prompt updates and feedback following interviews
Skills assessment relevant to the position, if applicable
Genuine, thoughtful human interaction throughout the hiring process