{"id":3844081,"url":"https://alion.io/job/kin-insurance-senior-security-engineer-app-sec","title":"Senior Security Engineer - App Sec","company":{"id":58643,"name":"Kin Insurance","domain":"kin.com","url":"https://alion.io/company/kin-insurance","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":88,"open_postings":4,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":{"min":141890,"max":159650,"currency":"CAD","period":"year","gross":null,"usd_annual":114083},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"IAM","optional":false},{"name":"Rest-Assured","optional":false},{"name":"Ruby","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-05T20:49:31Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-11T11:22:51Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Quick Summary\nYou’re the Security Engineer that developers call for advice, and the one who opens the pull request with the fix. Hands-on, cloud-aware, and at home in a codebase.\nWho we are\nKin makes life simpler, more affordable, and better for homeowners - especially in the places where climate risks, rising costs, and outdated systems make it harder. We start with smarter homeowners insurance and expand to everything homeowners need to thrive.\nUsing data, technology, and thoughtful human support, we’re building products that are clear, fair, and help homeowners feel confident - so homeowners aren’t left behind when they need help most.\nFounded in 2016, Kin is a remote-first employer with Kinfolk across more than 35 states. We serve customers in 14 states (and counting). Our disciplined growth, strong customer satisfaction, and focus on long-term sustainability fosters outstanding growth, attracts marquee investors, and earns recognition and accolades, including:\nBuilt In Chicago's Best Places to Work, Midsize Companies (2021-2026)\n\nForbes' America's Best Startup Employers (2026)\n\nInc. 5000 Fastest-Growing Private Companies\n\nForbes’ Fintech 50 (2023-2026)\n\nGreat Places to Work Certified (May 2024-May 2027)\n\nMost importantly, we’re building Kin to be a place where people do meaningful work with real impact - for our customers, our communities, and each other. We're excited to tell you more about how you can contribute to our rapid growth, strong unit economics, profitability, and excellent customer ratings. To learn more about how we work and what we’re building, visit kin.com and see how we work.\nThe Opportunity\nWe’re looking for a Sr Security Engineer with a focus on application security to help us ship fast and ship securely. Security needs to scale with engineering rather than slow it down. In this hands-on role, you’ll advise developers on secure design, review code and architecture before it ships, and get into the code yourself to fix vulnerabilities and collaborate on hardening systems at the source, across both our applications and our cloud infrastructure.\nEverything in security is moving fast, and this role calls for someone who stays a step ahead. You’ll track what’s emerging across application, code, and AI security and act on it before it becomes a problem, building the tooling, automation, and relationships that scale your impact. Your work will directly strengthen the security of the platform customers trust with their data.\nYour responsibilities\nOwn vulnerability remediation across engineering, driving findings to resolution and enforcing remediation SLAs\n\nWrite and ship code to harden Kin systems, working alongside developers to resolve and prevent issues at the source\n\nLead secure code reviews and architecture reviews, identifying risks early and delivering actionable recommendations\n\nPartner with developers on dependency and supply chain security, leading the response and hands-on remediation when critical vulnerabilities emerge in third-party packages\n\nBuild security tooling and automation to scale detection, triage, and remediation\n\nIdentify and collaborate on remediation of cloud vulnerabilities across AWS environments and Terraform-managed infrastructure\n\nProactively engage engineering teams and lead threat modeling with to surface security risks early in the development process\n\nMonitor emerging threats across application, code, and AI security, translating them into proactive remediation and guidance for engineering teams\n\nMentor engineers on secure coding practices and drive a security-first mindset across the organization, embedding security into day-to-day development\n\nSuccess in this role\nIn your first 6-12 months at Kin, success is less about checking boxes and more about the impact you create. You’ll use your skills and judgment to take ownership of meaningful work, improve how we operate, and help move Kin’s mission forward. Along the way, you’ll deliver outcomes that make a real difference for both Kinfolk and the homeowners we serve.\nBy the end of your first year, you should feel confident in your role, trusted as an owner, and proud of the progress you’ve helped make.\nResponse and remediation SLAs are being met consistently, supported by observability\n\nRepetitive security work is increasingly automated, freeing up more of your and engineering’s time to address improvements\n\nYour relationship with engineering teams is positive and proactive; engineers are engaging you in design and architecture conversations early, instead of after something ships\n\nOur applications and AWS infrastructure are being proactively hardened, and new work is shipping even more secure by default\n\nWhat you’ll bring\n5+ years of experience in software engineering or security engineering, including at least 1 year focused on security and the depth of security expertise to back it up\n\nHands-on proficiency in at least one backend programming language, with the ability to write and ship production code fixes (Ruby strongly preferred)\n\nHands-on experience working with SAST/DAST tools in CI/CD pipelines and turning their findings into fixes\n\nExperience driving vulnerability remediation at scale, including dependency and supply chain vulnerabilities, using tools such as GitHub Advanced Security\n\nExperience performing secure code reviews, architecture reviews, and threat modeling\n\nHands-on experience securing AWS environments (IAM, VPCs, WAF) and remediating infrastructure-as-code in Terraform\n\nAbility to explain security concepts, risks, and tradeoffs clearly to both technical and non-technical audiences\n\nHow we hire\nWe believe a great hiring experience should be clear, respectful, and human. We’ll accept applications for this position until 11/30/2026 While our recruiting team uses AI tools for efficiency, resumes are still screened by Kin’s in-house recruiters, and candidate evaluations and hiring decisions are made by recruiters and hiring teams. Rest assured, real people make real decisions.\nThe hiring process and timeline for each role will vary, depending on the position. However, here are some things you can expect from us:\nPrompt updates and feedback following interviews\n\nInterviews with recruiters, hiring managers, and members of teams\n\nSkills assessment relevant to the position, if applicable\n\nGenuine, thoughtful human interaction at every step\n\nHow we support you\nWe offer a comprehensive, competitive benefits program, allowing you to choose the benefits that are best for you and your family, starting on the first day of the month following your start date.\nCore Benefits\nCompetitive salary and company equity through Restricted Stock Units (RSUs), granted as part of our standard compensation package and based on role and level\n\n401(k) with company match up to 4% of eligible earnings\n\nMultiple medical plan options, plus dental and vision coverage\n\nCompany-funded HSA contributions (based on medical plan selection)\n\nCompany-paid life insurance and short-term disability\n\nHealth & Wellbeing\nA variety of supplemental benefit options, including long-term disability, critical illness, accident, legal, and pet insurance\n\nAccess to mental health support and confidential counseling resources\n\nFlexible PTO for exempt employees (most employees take 15-20 days per year), plus 8 company-observed holidays\n\nPaid parental leave, including up to 14 weeks at 100% pay for birthing parents and 8 weeks at 100% pay for non-birthing parents\n\nGrowth & Development\nCareer mobility and internal growth opportunities across the organization\n\nProfessional development budgets for certifications, conferences, and learning available, subject to management approval\n\nHow we work\nWe don’t just hire for skills. We hire for alignment. Kinfolk bring diverse perspectives, but we’re united by a shared set of values that shape how we work and how we show up for each other and our customers.\nRun through walls, together - Every one of us is responsible for creating the culture we want to work in. High performance. Low drama. Always respectful. We assume the best in each other and challenge ideas, not intentions. We show up, work hard, and play to each other's strengths - because that’s how great teams win.\nRaise the bar. Drop the ego - Attitudes are contagious. Every one of us is responsible for creating the culture we want to work in. High performance. Low drama. Always respectful. Like professional sports teams, we win by working in sync. We show up, work hard, and play to each other’s strengths.\nAct like an owner - We are owners, fully accountable for achieving Kin’s mission. That requires positive, proactive, big-picture thinking well beyond our job descriptions. Ask questions, Take ownership. Do the right thing, even when it‘s hard. Because when Kin thrives, so do you. And so do our customers.\nOperate lean. Deliver more - We build efficiency into everything we do. Each dollar we save gets reinvested to deliver more to our customers: better pricing, more products, and new innovations. We work smarter by relentlessly prioritizing and using technology, including AI, to multiply our impact. Lean is about focus, not deprivation. Lean isn't a limitation - it's our competitive advantage.\nKeep asking ‘What if?’ - We value curiosity. To make insurance better for our customers, we experiment. We embrace insights. And we base decisions on data rather than assumptions. We see setbacks as opportunities for growth and are always learning and improving. Both individually and as a company.\nWhere we work\nWe are a remote-first company with offices in Chicago, IL and St. Petersburg, FL where teams can come together for collaboration.\nFor Sales Agents and Customer Service Agents: These roles sit in any of the following 32 states: AL, AZ, CO, FL, ID, IL, IN, KS, KY, LA, MA, MD, ME, MI, MO, MT, NC, NE, NM, NV, NY, OH, OK, PA, SC, TN, TX, UT, VT, VA, WA, and WI.\nFor all other positions, these roles can sit in any of the following 41 states: AL, AR, AZ, CA (exempt only), CO, CT, FL, GA, ID, IL, IN, IA, KS, KY, LA, MA, ME, MD, MI, MN, MO, MT, NC, NE, NJ, NM, NV, NY, OH, OK, OR, PA, SC, SD, TN, TX, UT, VT, VA, WA, and WI. Please only apply if you are able to live and work full-time in one of the states listed above.\nFor remote technical positions located in Canada, we are only able to hire individuals who reside in Ontario. Applicants must be able to live and work full-time in Ontario to be considered.\nState locations and specifics are subject to change as our hiring requirements shift.\nEEOC statement\nKin is proud to be an Equal Employment Opportunity and Affirmative Action Employer. We don't just accept difference - we honor it, nurture it, and celebrate it. We don’t discriminate based on race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Kin welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. If you require accommodation, please contact us by sending an email to ","description_format":"text","description_chars":11309,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Growth opportunities","Life insurance","Parental leave","Professional development","Restricted stock units"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Property & Casualty Insurance","InsurTech"],"lifecycle":[{"event":"open","at":"2026-11-06T00:04:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":26,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-11T05:49:22Z"},"pay":{"stated_usd_annual":114083,"is_top_pay":false},"html_url":"https://alion.io/job/kin-insurance-senior-security-engineer-app-sec","json_url":"https://alion.io/job/kin-insurance-senior-security-engineer-app-sec.json","meta":{"generated_at":"2026-11-11T14:07:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25932,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58643},"rest":"https://alion.io/mcp/rest/get_company?id=58643"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkin-insurance-senior-security-engineer-app-sec"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkin-insurance-senior-security-engineer-app-sec"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkin-insurance-senior-security-engineer-app-sec"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kin-insurance-senior-security-engineer-app-sec\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkin-insurance-senior-security-engineer-app-sec"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3844081}},{"tool":"search_jobs","arguments":{"company":"kin.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3844081},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}