Kikoff

Builds credit through monthly payment plans

Senior Security Engineer - Data Security

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeSan Francisco, CA, USA$268k - $321kIn-person

About the Job

Requirements

At least 6 years of security engineering experience with hands-on data security experience in encryption, tokenization, access control design, and key management.
Strong command of AWS security primitives, including IAM, KMS, S3 security, and VPC controls.
Experience securing a modern data stack, including Snowflake or a comparable warehouse and relational databases in production.
Experience designing and shipping access control systems, including row- or column-level security, ABAC/RBAC, and access brokering.
Fluency in at least one automation language, such as Python, Go, Ruby, or a similar language.
Comfort working in a regulated environment.
Hands-on experience with infrastructure-as-code, such as Terraform or Pulumi.

Responsibilities

Own the data security roadmap end to end, covering classification, access controls, encryption, tokenization, and data flow security across AWS, Snowflake, and internal pipelines.
Set the strategy for how people, services, and AI agents access sensitive data, define the target state, and implement it.
Drive least-privilege access at scale, including brokered access patterns for the data warehouse and production databases instead of standing credentials.
Design and ship tokenization and field-level protection for sensitive data.
Build column-level and role-based access controls across Snowflake and RDS, with audit visibility into data access.
Secure data flows between cloud storage, pipelines, and application services so secure paths are the default.
Define and enforce access controls for AI agents to ensure least-privilege permissions and auditability.
Build audit logging and data access monitoring suitable for auditors and regulators.
Support data mapping and privacy engineering for new markets and regulatory regimes, including GLBA, LGPD, and state privacy laws.
Partner with Legal and Compliance on data handling requirements and implement them in infrastructure.
Provide engineers reusable patterns, clear guidance, and support for handling sensitive data.
Threat model new data flows before they are released.

Desired Qualifications

Experience securing data access for AI/LLM systems and agentic workloads.
Experience with tokenization at scale in fintech or payments.
Experience building audit logging and data access monitoring in-house.
Privacy engineering experience, including data mapping, retention, deletion pipelines, and cross-border transfer controls.
Background in consumer fintech or financial services.

Kikoff: The Fintech Powering Financial Security at Scale
Kikoff is a profitable, pre-IPO fintech company on a mission to empower everyone to achieve financial security. With record revenue growth in 2025 and a unicorn valuation, we've built a suite of products that help millions of people build credit, access liquidity, and save money.
We're scaling fast. Join us if you want to build something meaningful and help millions of people move forward financially.

Why Kikoff:

This is a consumer fintech startup, and you will be working with serial entrepreneurs who have built strong consumer brands and innovative products. We value extreme ownership, clear communication, a strong sense of craftsmanship, and the desire to create lasting work and work relationships. Yes, you can build an exciting business AND have real-life real-customer impact.

About the Role

Kikoff exists to help millions of people build credit. That only works if they trust us with their financial data. This role owns the Data Security pillar at Kikoff: how data is classified, accessed, encrypted, moved, and audited across our entire stack.

You will own and dictate the data security roadmap. You define the strategy, sequence the work, and drive it to done. Your work will be felt by every engineer at Kikoff and every customer we serve, and it will shape how we handle sensitive data as we scale.

In This Role, You Will

Own the Pillar

Own the data security roadmap end to end: classification, access controls, encryption, tokenization, and data flow security across AWS, Snowflake, and our internal pipelines.
Set the strategy for how humans, services, and AI agents access sensitive data. You decide what good looks like and build towards it.
Drive least-privilege access at scale, including brokered access patterns for our data warehouse and production databases rather than standing credentials.

Build & Secure

Design and ship tokenization and field-level protection for our most sensitive data
Build column-level and role-based access controls across Snowflake and RDS, with audit visibility into who touched what and why
Secure data flows between cloud storage, pipelines, and application services so the secure path is the default path
Define and enforce access controls for AI agents to guarantee least privilege permissions and proper audibility.

Prove It

Build audit logging and data access monitoring that holds up in front of auditors and regulators, not just dashboards
Support data mapping and privacy engineering work for new markets and regulatory regimes (GLBA, LGPD, state privacy laws)
Partner with Legal and Compliance on data handling requirements, and translate them into infrastructure, not policy docs

Enable Engineering

Give engineers paved roads for handling sensitive data: reusable patterns, clear guidance, fast answers
Threat model new data flows before they ship, not after

Qualifications

6+ years in security engineering with deep, hands-on data security experience: encryption, tokenization, access control design, key management
Strong command of AWS security primitives (IAM, KMS, S3 security, VPC controls)
Experience securing a modern data stack: Snowflake or a comparable warehouse, plus relational databases in production
You've designed and shipped access control systems, not just configured them. Row/column-level security, ABAC/RBAC, access brokering
Fluency in at least one language for automation (Python, Go, Ruby, or similar)
Comfortable in a regulated environment
Hands-on with infrastructure-as-code (Terraform or Pulumi)

Bonus Points

Experience securing data access for AI/LLM systems and agentic workloads
Tokenization at scale in fintech or payments
Audit logging and data access monitoring you built yourself, not bought
Privacy engineering depth: data mapping, retention, deletion pipelines, cross-border transfer controls
Consumer fintech or financial services background

Base Range

$268,000—$321,000 USD

A note on applying: We know great candidates sometimes hold back if they don’t meet every qualification listed. If you’re excited about this role and believe you can do the work, we encourage you to apply. We’re looking for capability and trajectory, not a perfect checklist match.

Equal Employment Opportunity Statement

Kikoff Inc. is an equal opportunity employer. We are committed to complying with all federal, state, and local laws providing equal employment opportunities and considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.

Please reference the following for more information.

Base Range 268000 - 321000 USD

About the Company

Kikoff

Builds credit through monthly payment plans

Kikoff sells credit-building subscriptions for people who want to establish a credit history or strengthen a limited one, using a credit account reported to the major credit bureaus. Its flagship Credit Account records monthly payments and account balances to build payment history and lower the share of available credit being used. Customers enroll without a credit check, choose a plan, and use its app to monitor credit reports, track scores, and dispute errors in their records. Kikoff earns recurring plan fees, with additional features such as rent reporting included in selected plans or sold separately. Kikoff was founded in 2019 and is headquartered in San Francisco.

Company size: 201-500
Company stage: Series B
Total funding: $42.5M
Headquarters: San Francisco, CA
Founded: 2019

Recently Posted Jobs

Explore more opportunities at Kikoff

See more jobs