{"id":578521,"url":"https://alion.io/job/kikoff-senior-security-engineer-data-security","title":"Senior Security Engineer, Data Security","company":{"id":171844,"name":"Kikoff","domain":"kikoff.com","url":"https://alion.io/company/kikoff","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":13,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":100,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":268000,"max":321000,"currency":"USD","period":"year","gross":null,"usd_annual":321000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Pulumi","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"Snowflake","optional":false},{"name":"Terraform","optional":false},{"name":"Tokenization","optional":false},{"name":"LLM","optional":true}],"status":"live","first_seen_at":"2026-09-09T18:43:45Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-28T23:33:18Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"Kikoff: The Fintech Powering Financial Security at Scale\nKikoff is a profitable, pre-IPO fintech company on a mission to empower everyone to achieve financial security. With record revenue growth in 2025 and a unicorn valuation, we've built a suite of products that help millions of people build credit, access liquidity, and save money.\nWe're scaling fast. Join us if you want to build something meaningful and help millions of people move forward financially.\nWhy Kikoff:\nThis is a consumer fintech startup, and you will be working with serial entrepreneurs who have built strong consumer brands and innovative products. We value extreme ownership, clear communication, a strong sense of craftsmanship, and the desire to create lasting work and work relationships. Yes, you can build an exciting business AND have real-life real-customer impact.\nAbout the Role\nKikoff exists to help millions of people build credit. That only works if they trust us with their financial data. This role owns the Data Security pillar at Kikoff: how data is classified, accessed, encrypted, moved, and audited across our entire stack.\nYou will own and dictate the data security roadmap. You define the strategy, sequence the work, and drive it to done. Your work will be felt by every engineer at Kikoff and every customer we serve, and it will shape how we handle sensitive data as we scale.\nIn This Role, You Will\nOwn the Pillar\nOwn the data security roadmap end to end: classification, access controls, encryption, tokenization, and data flow security across AWS, Snowflake, and our internal pipelines.\nSet the strategy for how humans, services, and AI agents access sensitive data. You decide what good looks like and build towards it.\nDrive least-privilege access at scale, including brokered access patterns for our data warehouse and production databases rather than standing credentials.\nBuild & Secure\nDesign and ship tokenization and field-level protection for our most sensitive data\nBuild column-level and role-based access controls across Snowflake and RDS, with audit visibility into who touched what and why\nSecure data flows between cloud storage, pipelines, and application services so the secure path is the default path\nDefine and enforce access controls for AI agents to guarantee least privilege permissions and proper audibility.\nProve It\nBuild audit logging and data access monitoring that holds up in front of auditors and regulators, not just dashboards\nSupport data mapping and privacy engineering work for new markets and regulatory regimes (GLBA, LGPD, state privacy laws)\nPartner with Legal and Compliance on data handling requirements, and translate them into infrastructure, not policy docs\nEnable Engineering\nGive engineers paved roads for handling sensitive data: reusable patterns, clear guidance, fast answers\nThreat model new data flows before they ship, not after\nQualifications\n6+ years in security engineering with deep, hands-on data security experience: encryption, tokenization, access control design, key management\nStrong command of AWS security primitives (IAM, KMS, S3 security, VPC controls)\nExperience securing a modern data stack: Snowflake or a comparable warehouse, plus relational databases in production\nYou've designed and shipped access control systems, not just configured them. Row/column-level security, ABAC/RBAC, access brokering\nFluency in at least one language for automation (Python, Go, Ruby, or similar)\nComfortable in a regulated environment\nHands-on with infrastructure-as-code (Terraform or Pulumi)\nBonus Points\nExperience securing data access for AI/LLM systems and agentic workloads\nTokenization at scale in fintech or payments\nAudit logging and data access monitoring you built yourself, not bought\nPrivacy engineering depth: data mapping, retention, deletion pipelines, cross-border transfer controls\nConsumer fintech or financial services background\nBase Range\n$268,000—$321,000 USD\nEqual Employment Opportunity Statement\nKikoff Inc. is an equal opportunity employer. We are committed to complying with all federal, state, and local laws providing equal employment opportunities and considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.\nPlease reference the following for more information.","description_format":"text","description_chars":4462,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Personal Finance Apps & Education","Consumer Loans & Pawnshops"],"lifecycle":[{"event":"open","at":"2026-09-09T19:48:45Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 28 · green card filings: 6","filings_12m":28,"filings_prev_12m":12,"green_card_filings_12m":6,"median_offered_wage_usd":192794,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.884,"p_room":0.9,"age_days":48,"expected_fill_days":100,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":321000,"is_top_pay":true},"html_url":"https://alion.io/job/kikoff-senior-security-engineer-data-security","json_url":"https://alion.io/job/kikoff-senior-security-engineer-data-security.json","meta":{"generated_at":"2026-10-29T01:50:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2814,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":171844},"rest":"https://alion.io/mcp/rest/get_company?id=171844"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkikoff-senior-security-engineer-data-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkikoff-senior-security-engineer-data-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkikoff-senior-security-engineer-data-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kikoff-senior-security-engineer-data-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkikoff-senior-security-engineer-data-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":578521}},{"tool":"search_jobs","arguments":{"company":"kikoff.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":578521},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}