Kinexys Security Engineer

Kinexys Security Engineer

Locations: Atlanta, GA / Houston, TX / Jersey City, NJ

Contract

Job Description

We are looking for an experienced Security Engineer – Risk & Controls with 10–15+ years of experience in technology security, risk management, and control governance. The ideal candidate will be responsible for identifying and assessing technology and security risks, driving remediation efforts, strengthening control frameworks, and partnering with engineering teams to implement secure and compliant solutions across blockchain, cloud, and enterprise platforms.

Key Responsibilities

• Conduct security risk assessments and identify control gaps across applications, infrastructure, cloud environments, and blockchain platforms.
• Design, evaluate, and strengthen security controls to mitigate technology risks and ensure compliance with organizational policies and regulatory requirements.
• Drive remediation of security findings, vulnerabilities, audit issues, and control deficiencies through to closure.
• Partner with engineering, architecture, and operations teams to integrate security into system design and delivery.
• Perform threat modeling and participate in architecture and solution security reviews.
• Support Identity and Access Management (IAM), secrets management, encryption, and cryptographic key management practices.
• Support internal audits, regulatory reviews, compliance assessments, evidence collection, and remediation tracking.
• Develop and maintain security policies, standards, procedures, and control documentation.
• Monitor security risk metrics, control effectiveness, and remediation progress, reporting findings and risks to management.
• Apply established security frameworks and standards, including NIST, ISO 27001, CIS Controls, COBIT, or equivalent.
• Support cloud security initiatives across AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Evaluate blockchain security risks involving smart contracts, cryptography, and distributed ledger technologies.
• Integrate security controls into the Secure Software Development Lifecycle (SSDLC), DevSecOps processes, and CI/CD pipelines.
• Collaborate with stakeholders to improve security governance, risk management, and control maturity across enterprise platforms.

Required Skills and Qualifications

• 10–15+ years of experience in technology security, security engineering, risk and controls, or related IT disciplines.
• Strong experience in security risk assessments, control evaluations, vulnerability remediation, and risk management.
• Good understanding of security and compliance frameworks such as NIST, ISO 27001, CIS Controls, and COBIT.
• Knowledge of cloud security principles and security services across AWS, Azure, or GCP.
• Strong understanding of IAM, access controls, secrets management, encryption, and key management.
• Experience supporting audits, regulatory assessments, compliance reviews, and remediation activities.
• Familiarity with blockchain technologies, smart contracts, cryptography, and distributed ledger platforms such as Ethereum, Hyperledger Besu, Canton, Solana, or Polygon.
• Proficiency in modern JavaScript/TypeScript frameworks such as React.js, Angular, or Vue.js.
• Experience with SSDLC, DevSecOps, secure coding practices, and CI/CD pipeline security integration.
• Familiarity with Governance, Risk, and Compliance (GRC) platforms such as Archer, ServiceNow GRC, or MetricStream.
• Strong analytical, problem-solving, communication, and stakeholder management skills.