Senior Security Engineer

Responsibilities

• Design and maintain secure-by-default infrastructure patterns, including IaC modules, container configurations, and IAM policy baselines.
• Own the cloud security posture across AWS, managing continuous coverage, guardrails, drift detection, and remediation workflows.
• Harden CI/CD pipelines and lead the software supply chain security strategy, including dependency scanning and artifact signing.
• Manage security across data infrastructure, focusing on classification, access controls, encryption, and secure data flows.
• Partner with product and platform engineers to embed security into the development lifecycle through threat modeling and code reviews.
• Participate in incident response, postmortems, and the remediation of vulnerabilities across applications and infrastructure.

Requirements

• 5+ years of security engineering experience in cloud-native environments (AWS preferred).
• Hands-on experience with Infrastructure-as-Code (IaC) security using Pulumi or Terraform.
• Strong command of AWS security primitives and experience securing containerized workloads.
• Proficiency in at least one scripting or programming language for automation (Python, Go, or Ruby).
• Experience working within regulated environments, such as PCI-DSS or SOC 2.
• Familiarity with industry-leading CNAPP or CSPM tooling.

Preferred Qualifications

• Deep expertise in supply chain security, including dependency confusion mitigations and artifact provenance.
• Advanced data security knowledge, such as tokenization and column-level access controls.
• Background in fintech or consumer financial services.
• Proven track record of building internal security tooling from scratch.

About the Company

Kikoff is a profitable, pre-IPO fintech company on a mission to empower everyone to achieve financial security. We have built a suite of products that help millions of people build credit, access liquidity, and save money. We value extreme ownership, clear communication, and a strong sense of craftsmanship.