Own the security program end-to-end as a Security Engineer at a fast-growing startup focused on secure data exchange.
Posted by employer 1 day ago
First seen on Joblaze 15 hours ago
Last verified on the company career page 15 hours ago
Skills & Technologies
What you'll build
- Own detection, response, and prevention across Mac-first environment
- Drive SOC 2 / Vanta program
- Manage security review of vendors and integrations
- Build alerts and dashboards for visibility
- Create clear documentation and training for security culture
Must have
- 4–6 years of security engineering experience
- Experience in a Mac-first environment
- Depth in CorpSec and SecOps
- Experience with SOC 2 audit cycle
- Comfortable with Datadog, SentinelOne, Okta, Google Workspace, Vanta
Nice to have
- CS degree
- CISSP, CISM, or OSCP
- Prior DevOps or platform engineering background
- Experience running third-party security reviews
- Detection engineering at scale
Requirements
- Experience
- 4–6 years
Not disclosed in this posting: compensation, visa sponsorship.
Joblaze summary
In this role, the Security Engineer at Kodex is responsible for managing the entire security program, including CorpSec, SecOps, and compliance tasks, while also developing security practices as the company scales. Key skills include experience with Mac environments, incident response, and SOC 2 audits, along with familiarity with tools like Datadog and SentinelOne. This position is ideal for someone with 4-6 years of hands-on security engineering experience, particularly in startup settings, who can operate independently and make critical decisions in a fast-paced environment.
Joblaze insights
- Listed today — first seen on Joblaze October 21, 2026. Last confirmed on Kodex's careers page October 21, 2026.
- Okta appears in 4.2% of 213 comparable mid security roles in United States; SentinelOne appears in 0.5% of 213 comparable mid security roles in United States.
Quick facts
- Is the Security Engineer role remote?
- Yes — Kodex lists this as a fully remote position.
- How much experience is required?
- 4–6 years of relevant experience for this Security Engineer role.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: Datadog, Google Workspace, Okta, SentinelOne, Vanta.
- What seniority level is this role?
- Kodex targets mid-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Security Engineer role at Kodex.
From the original posting
The Role
Kodex is hiring a Security Engineer to own the security program end-to-end as we scale. You'll take over CorpSec, SecOps, and compliance responsibilities from our current lead (who's moving into a broader platform role) and build out the practice across CloudSec and AppSec as we grow.
This is a hands-on, zero-to-one operator seat on a small team. You'll write the playbooks, run the response, own the tooling, and drive our next SOC 2 audit largely independently. High autonomy, high leverage, and real ownership of decisions that shape how a fast-growing Series A company protects itself and its customers.
This is a U.S.-based remote role.
Key Responsibilities
CorpSec & SecOps: Own detection, response, and prevention across our Mac-first environment. Run and refine the SentinelOne stack, phishing / email-security defense, and incident response playbooks.
Compliance & Audit: Drive our SOC 2 / Vanta program. Own the January–February audit cycle as the primary technical owner.
Identity & Access: Own Okta, Google Workspace, and access-management guardrails. Keep least-privilege enforced as we grow.
Detection & Observability: Use Datadog and SentinelOne to close visibility gaps; build alerts and dashboards that surface real signal.
Vendor & Third-Party Risk: Manage security review of vendors and integrations; keep Vanta accurate as the source of truth.
Security Culture: Bring the team along — clear docs, practical training, and playbooks that people actually use.
What You Bring
4–6 years of security engineering experience, ideally at a startup or small (< 200 person) company
Hands-on, zero-to-one operator — you've built security programs from scratch and made independent judgment calls in ambiguity
Mac-first environment experience — you've owned Mac fleet security, MDM, and Apple-native tooling
CorpSec + SecOps depth — detection engineering, incident response, phishing defense, endpoint security
SOC 2 experience — you've owned or contributed heavily to a SOC 2 audit cycle
Comfortable with our stack: Datadog, SentinelOne, Okta, Google Workspace, Vanta (or close analogues)
Practical security thinking — you think about real threats and real trade-offs, not trivia
Excellent communication — you can write clear playbooks and explain your reasoning to non-security stakeholders
Nice to have
CS degree
CISSP, CISM, or OSCP
Prior DevOps or platform engineering background that transitioned into security
Experience running third-party security reviews and vendor risk
Detection engineering at scale (Datadog / SIEM authoring)
Standard company text repeated across Kodex's postings is omitted here.