← Back to results

Senior Security Engineer, Data Security

Own the data security roadmap at Kikoff, ensuring trust in financial data for millions of users.

Location
San Francisco
Compensation
$268k–$321k/yr
Level
senior
Type
full time

Posted by employer 2 weeks ago

First seen on Joblaze 2 days ago

Last verified on the company career page 10 hours ago

Apply at Kikoff → Save job Scanned from kikoff.com

What you'll build

  • Own the data security roadmap end to end
  • Design and ship tokenization and field-level protection
  • Build column-level and role-based access controls
  • Secure data flows between cloud storage and application services
  • Build audit logging and data access monitoring

Must have

  • 6+ years in security engineering
  • Deep, hands-on data security experience
  • Strong command of AWS security primitives
  • Experience securing a modern data stack
  • Designed and shipped access control systems
  • Fluency in at least one language for automation

Nice to have

  • Experience securing data access for AI/LLM systems
  • Tokenization at scale in fintech or payments
  • Audit logging and data access monitoring you built yourself
  • Privacy engineering depth
  • Consumer fintech or financial services background

AI in the day-to-day

Define and enforce access controls for AI agents to guarantee least privilege permissions.

Requirements

Experience
6+ years

Not disclosed in this posting: work arrangement, visa sponsorship.

Joblaze summary

The Senior Security Engineer for Data Security at Kikoff is responsible for developing and managing the data security roadmap, ensuring that sensitive information is classified, accessed, and protected effectively. This role requires expertise in AWS security, encryption, and access control design, along with hands-on experience in securing modern data stacks like Snowflake. Ideal candidates will have over six years in security engineering, particularly in fintech or regulated environments, and a strong background in automation and infrastructure-as-code. Kikoff's fast-paced, consumer-focused environment emphasizes ownership and collaboration among its team.

Joblaze insights

  • Listed 2 days ago — first seen on Joblaze September 28, 2026. Last confirmed on Kikoff's careers page September 30, 2026.
  • Salary band is above the typical range for Security roles (median ~$170,000).
  • Starts above 89% of 96 comparable senior security roles in United States that list Python we track (median $172,200 across 43 companies). See Python salary trends
  • Python appears in 40.2% of 316 comparable senior security roles in United States; Pulumi appears in 0.6% of 316 comparable senior security roles in United States.

Quick facts

What's the salary range?
Kikoff lists $268,000–$321,000 for this role.
How much experience is required?
At least 6 years of relevant experience for this Senior Security Engineer, Data Security role.
What's the tech stack?
Joblaze extracted these technologies from the posting: AWS, Go, Pulumi, Python, Ruby, Snowflake.
What seniority level is this role?
Kikoff targets senior candidates for this position.
Is this full-time or contract?
Full-time for this Senior Security Engineer, Data Security role at Kikoff.

From the original posting

Kikoff: The Fintech Powering Financial Security at Scale
Kikoff is a profitable, pre-IPO fintech company on a mission to empower everyone to achieve financial security. With record revenue growth in 2025 and a unicorn valuation, we've built a suite of products that help millions of people build credit, access liquidity, and save money.
We're scaling fast. Join us if you want to build something meaningful and help millions of people move forward financially.

About the Role

Kikoff exists to help millions of people build credit. That only works if they trust us with their financial data. This role owns the Data Security pillar at Kikoff: how data is classified, accessed, encrypted, moved, and audited across our entire stack.

You will own and dictate the data security roadmap. You define the strategy, sequence the work, and drive it to done. Your work will be felt by every engineer at Kikoff and every customer we serve, and it will shape how we handle sensitive data as we scale.

In This Role, You Will

Own the Pillar

  • Own the data security roadmap end to end: classification, access controls, encryption, tokenization, and data flow security across AWS, Snowflake, and our internal pipelines.
  • Set the strategy for how humans, services, and AI agents access sensitive data. You decide what good looks like and build towards it.
  • Drive least-privilege access at scale, including brokered access patterns for our data warehouse and production databases rather than standing credentials.

Build & Secure

  • Design and ship tokenization and field-level protection for our most sensitive data
  • Build column-level and role-based access controls across Snowflake and RDS, with audit visibility into who touched what and why
  • Secure data flows between cloud storage, pipelines, and application services so the secure path is the default path
  • Define and enforce access controls for AI agents to guarantee least privilege permissions and proper audibility.

Prove It

  • Build audit logging and data access monitoring that holds up in front of auditors and regulators, not just dashboards
  • Support data mapping and privacy engineering work for new markets and regulatory regimes (GLBA, LGPD, state privacy laws)
  • Partner with Legal and Compliance on data handling requirements, and translate them into infrastructure, not policy docs

Enable Engineering

  • Give engineers paved roads for handling sensitive data: reusable patterns, clear guidance, fast answers
  • Threat model new data flows before they ship, not after

Qualifications

  • 6+ years in security engineering with deep, hands-on data security experience: encryption, tokenization, access control design, key management
  • Strong command of AWS security primitives (IAM, KMS, S3 security, VPC controls)
  • Experience securing a modern data stack: Snowflake or a comparable warehouse, plus relational databases in production
  • You've designed and shipped access control systems, not just configured them. Row/column-level security, ABAC/RBAC, access brokering
  • Fluency in at least one language for automation (Python, Go, Ruby, or similar)
  • Comfortable in a regulated environment
  • Hands-on with infrastructure-as-code (Terraform or Pulumi)

Bonus Points

  • Experience securing data access for AI/LLM systems and agentic workloads
  • Tokenization at scale in fintech or payments
  • Audit logging and data access monitoring you built yourself, not bought
  • Privacy engineering depth: data mapping, retention, deletion pipelines, cross-border transfer controls
  • Consumer fintech or financial services background

Base Range
$268,000—$321,000 USD

Equal Employment Opportunity Statement

Standard company text repeated across Kikoff's postings is omitted here.

Similar positions

Kikoff
Senior Security Engineer, Application Security
Kikoff · San Francisco, United States
K2 Space
K2 Space
Okta
Senior Software Engineer, Data Platform
Okta · Bellevue, Washington, United States
Kaizen Labs
Senior Security Engineer
Kaizen Labs · New York, NY