Senior Security Engineer (Data Security)

About the role

• Kikoff exists to help millions of people build credit. That only works if they trust us with their financial data. This role owns the Data Security pillar at Kikoff: how data is classified, accessed, encrypted, moved, and audited across our entire stack • You will own and dictate the data security roadmap. You define the strategy, sequence the work, and drive it to done. Your work will be felt by every engineer at Kikoff and every customer we serve, and it will shape how we handle sensitive data as we scale • Own the Pillar • Own the data security roadmap end to end: classification, access controls, encryption, tokenization, and data flow security across AWS, Snowflake, and our internal pipelines • Set the strategy for how humans, services, and AI agents access sensitive data. You decide what good looks like and build towards it • Drive least-privilege access at scale, including brokered access patterns for our data warehouse and production databases rather than standing credentials • Build & Secure • Design and ship tokenization and field-level protection for our most sensitive data • Build column-level and role-based access controls across Snowflake and RDS, with audit visibility into who touched what and why • Secure data flows between cloud storage, pipelines, and application services so the secure path is the default path • Define and enforce access controls for AI agents to guarantee least privilege permissions and proper audibility • Prove It • Build audit logging and data access monitoring that holds up in front of auditors and regulators, not just dashboards • Support data mapping and privacy engineering work for new markets and regulatory regimes (GLBA, LGPD, state privacy laws) • Partner with Legal and Compliance on data handling requirements, and translate them into infrastructure, not policy docs • Enable Engineering • Give engineers paved roads for handling sensitive data: reusable patterns, clear guidance, fast answers • Threat model new data flows before they ship, not after Benefits • Health Benefits • Flexible PTO Policy • Kickoff Paid Holidays • Office Lunch & Dinners • Commuter Benefits • Commuter Flexible Savings • 401k Matching • Fitness Benefit Policy