Cyber Security Engineer
datakiteBrooklyn (NY)
About the role
Own the security posture of our platform across on-prem bank deployments—threat modeling, security controls, vulnerability management, and ISO 27001 aligned governance—working hand in hand with engineering, DevOps, and bank security teams.
AppSec, Cloud-Native & Banking Compliance
Role scope. Make sure DataKite ships and operates securely inside the most regulated environments in the region.
What you will work onThreat modeling and security design reviews for on-prem deployments and bank integrations
Security controls: network segmentation, TLS/mTLS, certificate lifecycle, secrets management
IAM patterns: OAuth2/OIDC/SSO, least privilege, RBAC
AppSec: secure SDLC, code review guidance, SAST/DAST/SCA and container scanning
Vulnerability management and remediation tracking across services
Security questionnaires, risk assessments, pen-test coordination, and remediation planning
Logging, monitoring, and auditability: audit trails, SIEM integration, alerting
ISO 27001 support: ISMS controls, risk treatment, audits, policy alignment, CAPA
Strong candidates have3–6 years of cybersecurity experience in enterprise environments (banking / fintech)
Solid IAM, network security, and cryptography fundamentals (TLS, PKI, key management)
Vulnerability management with SAST/DAST, SCA, container scanning, OWASP Top 10, API security
Strong stakeholder communication and security documentation skills
Bonus:
Kubernetes/OpenShift hardening, SIEM (Splunk/QRadar/ELK), HashiCorp Vault, WAF/API gateway policies, Security+/SSCP/CEH/eJPT
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
More like this
