The RoleKodex is hiring a Security Engineer to own the security program end-to-end as we scale. You'll take over CorpSec, SecOps, and compliance responsibilities from our current lead (who's moving into a broader platform role) and build out the practice across CloudSec and AppSec as we grow.
This is a hands-on, zero-to-one operator seat on a small team. You'll write the playbooks, run the response, own the tooling, and drive our next SOC 2 audit largely independently. High autonomy, high leverage, and real ownership of decisions that shape how a fast-growing Series A company protects itself and its customers.
This is a U.S.-based remote role.
Key Responsibilities- CorpSec & SecOps: Own detection, response, and prevention across our Mac-first environment. Run and refine the SentinelOne stack, phishing / email-security defense, and incident response playbooks.
- Compliance & Audit: Drive our SOC 2 / Vanta program. Own the January-February audit cycle as the primary technical owner.
- Identity & Access: Own Okta, Google Workspace, and access-management guardrails. Keep least-privilege enforced as we grow.
- Detection & Observability: Use Datadog and SentinelOne to close visibility gaps; build alerts and dashboards that surface real signal.
- Vendor & Third-Party Risk: Manage security review of vendors and integrations; keep Vanta accurate as the source of truth.
- Security Culture: Bring the team along - clear docs, practical training, and playbooks that people actually use.
What You Bring- 4-6 years of security engineering experience, ideally at a startup or small (< 200 person) company
- Hands-on, zero-to-one operator - you've built security programs from scratch and made independent judgment calls in ambiguity
- Mac-first environment experience - you've owned Mac fleet security, MDM, and Apple-native tooling
- CorpSec + SecOps depth - detection engineering, incident response, phishing defense, endpoint security
- SOC 2 experience - you've owned or contributed heavily to a SOC 2 audit cycle
- Comfortable with our stack: Datadog, SentinelOne, Okta, Google Workspace, Vanta (or close analogues)
- Practical security thinking - you think about real threats and real trade-offs, not trivia
- Excellent communication - you can write clear playbooks and explain your reasoning to non-security stakeholders
Nice to have- CS degree
- CISSP, CISM, or OSCP
- Prior DevOps or platform engineering background that transitioned into security
- Experience running third-party security reviews and vendor risk
- Detection engineering at scale (Datadog / SIEM authoring)
