HireFT
Browse JobsHow it worksPricingAboutSuccess Stories
    Back to jobs
    KI

    Kikoff

    Information Technology & Services

    Senior Security Engineer, Data Security

    San Francisco, United StatesOn-SiteFull-time6+ yrs experiencePosted 1mo ago
    All Kikoff jobs

    Job description

    Kikoff: The Fintech Powering Financial Security at Scale
    Kikoff is a profitable, pre-IPO fintech company on a mission to empower everyone to achieve financial security. With record revenue growth in 2025 and a unicorn valuation, we've built a suite of products that help millions of people build credit, access liquidity, and save money.
    We're scaling fast. Join us if you want to build something meaningful and help millions of people move forward financially.

    Why Kikoff:

    This is a consumer fintech startup, and you will be working with serial entrepreneurs who have built strong consumer brands and innovative products. We value extreme ownership, clear communication, a strong sense of craftsmanship, and the desire to create lasting work and work relationships. Yes, you can build an exciting business AND have real-life real-customer impact.

    About the Role

    Kikoff exists to help millions of people build credit. That only works if they trust us with their financial data. This role owns the Data Security pillar at Kikoff: how data is classified, accessed, encrypted, moved, and audited across our entire stack.

    You will own and dictate the data security roadmap. You define the strategy, sequence the work, and drive it to done. Your work will be felt by every engineer at Kikoff and every customer we serve, and it will shape how we handle sensitive data as we scale.

    In This Role, You Will

    Own the Pillar

    • Own the data security roadmap end to end: classification, access controls, encryption, tokenization, and data flow security across AWS, Snowflake, and our internal pipelines.
    • Set the strategy for how humans, services, and AI agents access sensitive data. You decide what good looks like and build towards it.
    • Drive least-privilege access at scale, including brokered access patterns for our data warehouse and production databases rather than standing credentials.

    Build & Secure

    • Design and ship tokenization and field-level protection for our most sensitive data
    • Build column-level and role-based access controls across Snowflake and RDS, with audit visibility into who touched what and why
    • Secure data flows between cloud storage, pipelines, and application services so the secure path is the default path
    • Define and enforce access controls for AI agents to guarantee least privilege permissions and proper audibility.

    Prove It

    • Build audit logging and data access monitoring that holds up in front of auditors and regulators, not just dashboards
    • Support data mapping and privacy engineering work for new markets and regulatory regimes (GLBA, LGPD, state privacy laws)
    • Partner with Legal and Compliance on data handling requirements, and translate them into infrastructure, not policy docs

    Enable Engineering

    • Give engineers paved roads for handling sensitive data: reusable patterns, clear guidance, fast answers
    • Threat model new data flows before they ship, not after

    Qualifications

    • 6+ years in security engineering with deep, hands-on data security experience: encryption, tokenization, access control design, key management
    • Strong command of AWS security primitives (IAM, KMS, S3 security, VPC controls)
    • Experience securing a modern data stack: Snowflake or a comparable warehouse, plus relational databases in production
    • You've designed and shipped access control systems, not just configured them. Row/column-level security, ABAC/RBAC, access brokering
    • Fluency in at least one language for automation (Python, Go, Ruby, or similar)
    • Comfortable in a regulated environment
    • Hands-on with infrastructure-as-code (Terraform or Pulumi)

    Bonus Points

    • Experience securing data access for AI/LLM systems and agentic workloads
    • Tokenization at scale in fintech or payments
    • Audit logging and data access monitoring you built yourself, not bought
    • Privacy engineering depth: data mapping, retention, deletion pipelines, cross-border transfer controls
    • Consumer fintech or financial services background
    Base Range
    $268,000—$321,000 USD

    Equal Employment Opportunity Statement

    Kikoff Inc. is an equal opportunity employer. We are committed to complying with all federal, state, and local laws providing equal employment opportunities and considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.

    Please reference the following for more information.

    Job details are sourced from the employer's original posting.

    Open job posting
    KI

    About the company

    Kikoff

    Kikoff was founded in 2019 with a not-so-simple goal: make it easier for people to build credit. Credit plays a huge role in our lives, from opening a credit card to qualifying for a home loan. But there's a catch, it's easier to build credit, when you already have it. ‍ Co-founders Cynthia Chen and Christophe Chong understood this challenge first hand, so they built a solution. Kikoff's main product is our Credit Account, a specialized, reported credit line exclusively focused on building credit. We've expanded the features of our paid account to include things like spam call blocking, identity protection, rent reporting, and more. Over a million people have used Kikoff to build their credit.

    View all Kikoff jobsLinkedIn
    Industry
    Information Technology & Services
    Founded
    2019
    Open roles
    47

    Interested in this role?

    Apply with HireFT

    Free to start — no card required.

    Your fit

    How well do you match?

    Sign in to see how your résumé lines up with this role.