jobapplier

Senior Security Engineer (Data Security)

Kikoff

Skills

Required

  • data security
  • access
  • tokenization
  • encryption
  • access control design
  • key management
  • AWS security primitives
  • IAM
  • KMS
  • S3 security
  • Python
  • Go
  • Ruby
  • Terraform / Pulumi

Preferred

  • data access
  • data mapping
  • retention
  • deletion pipelines
  • cross-border transfer controls
  • data security roadmap
  • ensuring secure data flows

Join Kikoff, a company dedicated to helping millions build credit. As a Senior Security Engineer, you will own the Data Security pillar, defining the strategy and driving the roadmap for data classification, access controls, encryption, and data flow security. You will design and implement tokenization and field-level protection, build access controls, and ensure secure data flows. You will also support data mapping and privacy engineering work, partner with Legal and Compliance, and enable engineering teams with reusable patterns and guidance.

USD 268,000 - 321,000

Responsibilities

  • Own and dictate the data security roadmap, defining the strategy and driving it to completion.
  • Design and ship tokenization and field-level protection for sensitive data, ensuring secure data flows.
  • Build audit logging and data access monitoring that meets regulatory requirements and supports data mapping.
  • Experience securing a modern data stack: Snowflake or a comparable warehouse, plus relational databases in production

Requirements

  • 6+ years in security engineering with deep, hands-on data security experience: encryption, tokenization, access control design, key management
  • Strong command of AWS security primitives (IAM, KMS, S3 security, VPC controls)
  • You've designed and shipped access control systems, not just configured them. Row/column-level security, ABAC/RBAC, access brokering
  • Fluency in at least one language for automation (Python, Go, Ruby, or similar)
  • Hands-on with infrastructure-as-code (Terraform or Pulumi)
  • Experience securing data access for AI/LLM systems and agentic workloads

Preferred

  • Comfortable in a regulated environment

Tokenization at scale in fintech or payments

  • Audit logging and data access monitoring you built yourself, not bought
  • Privacy engineering depth: data mapping, retention, deletion pipelines, cross-border transfer controls
  • Consumer fintech or financial services background