kodex - Security Engineer

• This is a hands-on, zero-to-one operator seat on a small team. You'll write the playbooks, run the response, own the tooling, and drive our next SOC 2 audit largely independently. High autonomy, high leverage, and real ownership of decisions that shape how a fast-growing Series A company protects itself and its customers. • This is a U.S.-based remote role. • CorpSec & SecOps: Own detection, response, and prevention across our Mac-first environment. Run and refine the SentinelOne stack, phishing / email-security defense, and incident response playbooks. • Compliance & Audit: Drive our SOC 2 / Vanta program. Own the January–February audit cycle as the primary technical owner. • Identity & Access: Own Okta, Google Workspace, and access-management guardrails. Keep least-privilege enforced as we grow. • Detection & Observability: Use Datadog and SentinelOne to close visibility gaps; build alerts and dashboards that surface real signal. • Vendor & Third-Party Risk: Manage security review of vendors and integrations; keep Vanta accurate as the source of truth. • Security Culture: Bring the team along — clear docs, practical training, and playbooks that people actually use.