> Markdown version of [/jobs/ext/4621513-senior-security-engineer-app-sec](https://www.wearedevelopers.com/jobs/ext/4621513-senior-security-engineer-app-sec). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer - App Sec

- **Company:** Kin Insurance, Inc.
- **Location:** St. Petersburg, FL, United States
- **Experience:** Expert
- **Salary:** $141,890 - $159,650
- **Contract:** Permanent contract
- **Skills:** Adobe InDesign, Amazon Web Services, Github, Identity and Access Management, Ruby, Secure Coding, Software Engineering, Software Vulnerability Management, Production Code, Terraform, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** November 7, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=04b77c8a287a6311

## About the Role

* 5+ years of experience in software engineering or security engineering, including at least 1 year focused on security and the depth of security expertise to back it up
 * Hands-on proficiency in at least one backend programming language, with the ability to write and ship production code fixes (Ruby strongly preferred)
 * Hands-on experience working with SAST/DAST tools in CI/CD pipelines and turning their findings into fixes
 * Experience driving vulnerability remediation at scale, including dependency and supply chain vulnerabilities, using tools such as GitHub Advanced Security
 * Experience performing secure code reviews, architecture reviews, and threat modeling
 * Hands-on experience securing AWS environments (IAM, VPCs, WAF) and remediating infrastructure-as-code in Terraform
 * Ability to explain security concepts, risks, and tradeoffs clearly to both technical and non-technical audiences

## Description

* Own vulnerability remediation across engineering, driving findings to resolution and enforcing remediation SLAs
 * Write and ship code to harden Kin systems, working alongside developers to resolve and prevent issues at the source
 * Lead secure code reviews and architecture reviews, identifying risks early and delivering actionable recommendations
 * Partner with developers on dependency and supply chain security, leading the response and hands-on remediation when critical vulnerabilities emerge in third-party packages
 * Build security tooling and automation to scale detection, triage, and remediation
 * Identify and collaborate on remediation of cloud vulnerabilities across AWS environments and Terraform-managed infrastructure
 * Proactively engage engineering teams and lead threat modeling with to surface security risks early in the development process
 * Monitor emerging threats across application, code, and AI security, translating them into proactive remediation and guidance for engineering teams
 * Mentor engineers on secure coding practices and drive a security-first mindset across the organization, embedding security into day-to-day development

Success in this role

In your first 6-12 months at Kin, success is less about checking boxes and more about the impact you create. You'll use your skills and judgment to take ownership of meaningful work, improve how we operate, and help move Kin's mission forward. Along the way, you'll deliver outcomes that make a real difference for both Kinfolk and the homeowners we serve.

By the end of your first year, you should feel confident in your role, trusted as an owner, and proud of the progress you've helped make.

 * Response and remediation SLAs are being met consistently, supported by observability
 * Repetitive security work is increasingly automated, freeing up more of your and engineering's time to address improvements
 * Your relationship with engineering teams is positive and proactive; engineers are engaging you in design and architecture conversations early, instead of after something ships
 * Our applications and AWS infrastructure are being proactively hardened, and new work is shipping even more secure by default, The hiring process and timeline for each role will vary, depending on the position. However, here are some things you can expect from us:
 * Prompt updates and feedback following interviews
 * Interviews with recruiters, hiring managers, and members of teams
 * Skills assessment relevant to the position, if applicable
 * Genuine, thoughtful human interaction at every step