Cyber Security Engineer

DataKite; Northern (KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

DataKite is seeking a security-focused professional to own the security posture of our platform in regulated on-prem bank deployments. You will lead threat modeling, security design reviews, and implement controls to ensure compliance and secure operation.

You will manage vulnerability processes, security questionnaires, and incident coordination while partnering with engineering, DevOps, and banking teams. Strong communication and documentation skills are essential.

Qualifications

• 3–6 years of cybersecurity experience in enterprise environments (banking / fintech).
• Solid IAM, network security, and cryptography fundamentals (TLS, PKI, key management).
• Vulnerability management with SAST/DAST, SCA, container scanning, OWASP Top 10, API security.
• Strong stakeholder communication and security documentation skills.
• Bonus: Kubernetes/OpenShift hardening, SIEM (Splunk/QRadar/ELK), HashiCorp Vault, WAF/API gateway policies, Security+/SSCP/CEH/eJPT.

Responsibilities

• Threat modeling and security design reviews for on-prem deployments and bank integrations.
• Security controls: network segmentation, TLS/mTLS, certificate lifecycle, secrets management.
• IAM patterns: OAuth2/OIDC/SSO, least privilege, RBAC.
• AppSec: secure SDLC, code review guidance, SAST/DAST/SCA and container scanning.
• Vulnerability management and remediation tracking across services.
• Security questionnaires, risk assessments, pen-test coordination, and remediation planning.
• Logging, monitoring, and auditability: audit trails, SIEM integration, alerting.
• ISO 27001 support: ISMS controls, risk treatment, audits, policy alignment, CAPA.

Skills

Stakeholder communication

Security documentation

Threat modeling

Security design reviews

Vulnerability management

IAM patterns

Cloud security fundamentals

Cryptography fundamentals

Tools

SAST

DAST

SCA

Container scanning

Kubernetes/OpenShift hardening

SIEM (Splunk/QRadar/ELK)

HashiCorp Vault

WAF/API gateway policies

TLS/mTLS/PKI

Job description

Own the security posture of our platform across on-prem bank deployments—threat modeling, security controls, vulnerability management, and ISO 27001 aligned governance—working hand in hand with engineering, DevOps, and bank security teams.

AppSec, Cloud-Native & Banking Compliance

Role scope.

Make sure DataKite ships and operates securely inside the most regulated environments in the region.

What you will work on

• Threat modeling and security design reviews for on-prem deployments and bank integrations
• Security controls: network segmentation, TLS/mTLS, certificate lifecycle, secrets management
• IAM patterns: OAuth2/OIDC/SSO, least privilege, RBAC
• AppSec: secure SDLC, code review guidance, SAST/DAST/SCA and container scanning
• Vulnerability management and remediation tracking across services
• Security questionnaires, risk assessments, pen-test coordination, and remediation planning
• Logging, monitoring, and auditability: audit trails, SIEM integration, alerting
• ISO 27001 support: ISMS controls, risk treatment, audits, policy alignment, CAPA

Strong candidates have

• 3–6 years of cybersecurity experience in enterprise environments (banking / fintech)
• Solid IAM, network security, and cryptography fundamentals (TLS, PKI, key management)
• Vulnerability management with SAST/DAST, SCA, container scanning, OWASP Top 10, API security
• Strong stakeholder communication and security documentation skills
• Bonus: Kubernetes/OpenShift hardening, SIEM (Splunk/QRadar/ELK), HashiCorp Vault, WAF/API gateway policies, Security+/SSCP/CEH/eJPT