Senior Data Security Engineer: Tokenization & Access Control

Kikoff; San Francisco (CA); On-site; USD 268,000 - 321,000; Full time

Job summary

Kikoff is seeking a data security leader to own and drive the data security pillar across our stack. You will define strategy, set roadmaps, and ensure secure handling of sensitive data as we scale.

Your work will impact engineers and customers alike, shaping encryption, access controls, and audit visibility. You will collaborate with Legal, Compliance, and Engineering to implement scalable, auditable security controls, including AI data access safeguards and tokenization strategies.

Qualifications

• 6+ years in security engineering with hands-on data security: encryption, tokenization, access control design, key management.
• Strong command of AWS security primitives (IAM, KMS, S3 security, VPC controls).
• Experience securing a modern data stack: Snowflake or a comparable warehouse, plus relational databases in production.
• You've designed and shipped access control systems, not just configured them. Row/column-level security, ABAC/RBAC, access brokering.
• Fluency in at least one language for automation (Python, Go, Ruby, or similar).
• Hands-on with infrastructure-as-code (Terraform or Pulumi).

Responsibilities

• Own the data security roadmap end to end: classification, access controls, encryption, tokenization, and data flow security across AWS, Snowflake, and internal pipelines.
• Define and enforce access controls for AI agents to guarantee least privilege permissions and proper audibility.
• Build audit logging and data access monitoring that holds up in front of auditors and regulators, not just dashboards.
• Partner with Legal and Compliance on data handling requirements, and translate them into infrastructure, not policy docs.

Skills

Security engineering

AWS security

Access control design

Data security

Automation scripting

IaC (Terraform/Pulumi)

Tools

Snowflake

Terraform

Pulumi

Job description

Kikoff is seeking a data security leader to own and drive the data security pillar across our stack. You will define strategy, set roadmaps, and ensure secure handling of sensitive data as we scale.

Your work will impact engineers and customers alike, shaping encryption, access controls, and audit visibility. You will collaborate with Legal, Compliance, and Engineering to implement scalable, auditable security controls, including AI data access safeguards and tokenization strategies.