Security Specialist

Kojo is looking for a Security Specialist to lead and scale the company's security and compliance efforts. As an individual contributor within the Infrastructure team, this role blends hands-on technical work with audit readiness, policy management, and risk oversight. The Security Specialist will be the go-to expert for SOC 2, AWS security, incident response, and access control as the company grows. Key responsibilities include owning and leading SOC 2 Type I & II readiness, audits, and ongoing compliance; developing and enforcing internal security policies and controls; improving and monitoring AWS security posture; managing secrets, access, and vulnerability remediation; triaging real-time security alerts and leading incident response efforts; supporting secure CI/CD practices and engineering reviews; and partnering with leadership and auditors for security reviews and vendor risk management.