Security Engineer - Banking On-Prem & ISO 27001

DataKite; Northern (KY); Hybrid; USD 110.000 - 140.000; Vollzeit

Zusammenfassung

DataKite is seeking a security-focused professional to own the security posture of our platform in regulated on-prem bank deployments. You will lead threat modeling, security design reviews, and implement controls to ensure compliance and secure operation.

You will manage vulnerability processes, security questionnaires, and incident coordination while partnering with engineering, DevOps, and banking teams. Strong communication and documentation skills are essential.

Qualifikationen

• 3–6 years of cybersecurity experience in enterprise environments (banking / fintech).
• Solid IAM, network security, and cryptography fundamentals (TLS, PKI, key management).
• Vulnerability management with SAST/DAST, SCA, container scanning, OWASP Top 10, API security.
• Strong stakeholder communication and security documentation skills.
• Bonus: Kubernetes/OpenShift hardening, SIEM (Splunk/QRadar/ELK), HashiCorp Vault, WAF/API gateway policies, Security+/SSCP/CEH/eJPT.

Aufgaben

• Threat modeling and security design reviews for on-prem deployments and bank integrations.
• Security controls: network segmentation, TLS/mTLS, certificate lifecycle, secrets management.
• IAM patterns: OAuth2/OIDC/SSO, least privilege, RBAC.
• AppSec: secure SDLC, code review guidance, SAST/DAST/SCA and container scanning.
• Vulnerability management and remediation tracking across services.
• Security questionnaires, risk assessments, pen-test coordination, and remediation planning.
• Logging, monitoring, and auditability: audit trails, SIEM integration, alerting.
• ISO 27001 support: ISMS controls, risk treatment, audits, policy alignment, CAPA.

Kenntnisse

Stakeholder communication

Security documentation

Threat modeling

Security design reviews

Vulnerability management

IAM patterns

Cloud security fundamentals

Cryptography fundamentals

Tools

SAST

DAST

SCA

Container scanning

Kubernetes/OpenShift hardening

SIEM (Splunk/QRadar/ELK)

HashiCorp Vault

WAF/API gateway policies

TLS/mTLS/PKI

Jobbeschreibung

DataKite is seeking a security-focused professional to own the security posture of our platform in regulated on-prem bank deployments. You will lead threat modeling, security design reviews, and implement controls to ensure compliance and secure operation.

You will manage vulnerability processes, security questionnaires, and incident coordination while partnering with engineering, DevOps, and banking teams. Strong communication and documentation skills are essential.