Security Engineer (Modernization & Hybrid Cloud)

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

At Kyndryl, our Security Consultants are game-changers, constantly pushing the boundaries of what's possible and transforming the way our customers do business. We're looking for a talented individual who thrives in a dynamic environment and is ready to take on the challenge of protecting organizations from threats both known and unknown - being the defender of tomorrow's digital world.

As a Security Consultant, you'll be the guardian of confidentiality, integrity, and availability, ensuring organizations are shielded from the ever-evolving threat landscape. Your expertise will be sought after as you assess, analyze, and implement effective security measures in customer environments, leaving no stone unturned when it comes to safeguarding their most sensitive data.

Collaboration will be your forte, as you work closely with clients to understand their unique security requirements and assess their current security posture. Armed with this knowledge, you'll provide expert guidance and recommendations on the best security practices, risk management strategies, and robust security policies that will fortify their defenses.

You won't stop at providing advice; you'll roll up your sleeves and get hands-on. Designing and implementing security controls, policies, and procedures will be your playground. You'll work alongside cross-functional teams to deploy state-of-the-art technologies, including firewalls, intrusion detection/prevention systems, access controls, and encryption technologies, ensuring a comprehensive security framework.

The thrill of uncovering vulnerabilities and risks is what motivates you. Armed with your extensive knowledge, you'll conduct thorough security assessments, leaving no stone unturned in identifying potential security breaches. Your findings will serve as the foundation for meticulous security audits and reviews, ensuring adherence to policies and procedures. Your reports and findings will be the catalyst for management decisions and actions.

In the fast-paced world of cybersecurity, staying ahead of the game is crucial. That's why you'll continuously immerse yourself in the latest security threats, technologies, and best practices. Your recommendations will drive enhancements to the organization's security posture, ensuring it remains at the cutting edge of defense.

Your influence won't be limited to systems alone. You'll lend your expertise to the design and review of IT infrastructure, systems, and applications, ensuring they are secure by design from inception.

Not only will you make an impact within our organization, but you'll also collaborate with customers and vendors on security assessments, audits, and due diligence activities. Your knowledge and experience will be instrumental in shaping secure collaborations and partnerships.

Our consultants are restless for innovation. They are at the edge of technology, changing the way our customers implement business solutions - so, if you're a problem-solver, an innovative thinker, and a self-starter with a passion high impact assignments which align technology to business outcomes, then we want to hear from you! Apply today to join our team that has a host of exciting projects and customers waiting for you to work with them to solve complex transformation puzzles through technology.

Your Future at Kyndryl
As a Security Consultant at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts - presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth

Who You Are

You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.

• Secure Architecture Design: Define and implement the security blueprint for the coexistence and migration phases, ensuring "Security by Design" in Java microservices and cloud-native databases.
• Mainframe-to-Cloud Identity Bridge: Design and oversee secure integration patterns between Mainframe Security (RACF) and Cloud Identity Providers (Azure AD/Entra ID), focusing on Zero Trust principles.
• Application Security (AppSec) for Java: Lead the implementation of SAST, DAST, and SCA within the CI/CD pipeline, specifically for high-concurrency Java applications.
• Legacy Data Protection: Define encryption, masking, and tokenization strategies for sensitive data residing in DB2 (Mainframe) and VSAM, ensuring secure transit to Cloud databases (PostgreSQL/SingleStore).
• Security Performance Optimization: Evaluate the performance impact of security controls (encryption overhead, firewall latency, mTLS) to ensure they do not degrade banking transaction speeds.
• Cloud Infrastructure Hardening: Configure and audit security posture in Azure, including Network Security Groups, Key Vaults, and Private Links for database access.
• Secure API & Integration: Enforce security standards for API Gateways, ensuring robust OAuth2/OIDC implementation and protection against OWASP Top 10 threats.
• Incident Response & Forensics: Establish logging and monitoring strategies (SIEM/SOAR) that correlate events between legacy batch processes and modern distributed traces.

• Mainframe Security: Deep understanding of RACF (or ACF2/Top Secret), including resource profiles and user access management in COBOL/CICS environments.
• Legacy Data Access: Experience securing data extraction from DB2 and VSAM file structures during migration phases.
• Secure Protocols: Advanced knowledge of AT-TLS, SSH tunneling, and secure file transfer (SFTP/FTPS) between Mainframe and Midrange.

• Cloud Platforms: Extensive experience hardening Azure services (AKS, Azure SQL, Key Vault, Azure Firewall).
• Modern Databases: Security configuration for PostgreSQL and distributed databases (SingleStore or equivalent), including Row-Level Security (RLS) and encryption at rest/in transit.
• Network Security: Design of Hub-and-Spoke architectures, Private Endpoints, and WAF configurations.

• Java Security Deep-Dive: Advanced knowledge of the Spring Security ecosystem, JVM security settings, and mitigating vulnerabilities in Java-based microservices.
• Code Review: Ability to identify security flaws in Java and provide guidance on secure coding practices in COBOL (preventing buffer overflows or unauthorized access logic).
• DevSecOps: Hands-on experience integrating security tools (Checkmarx, SonarQube, Snyk) into automated pipelines.

• Cryptographic Standards: Implementation of AES-256, RSA, and ECC; understanding of HSM (Hardware Security Modules) integration.
• Performance Engineering for Security: Ability to profile application performance to minimize the latency introduced by TLS handshakes and payload encryption.

• Security-Performance Balance: Deliver security solutions that meet stringent banking regulations without introducing bottlenecks in high-volume transactional flows.
• Full-Stack Security Visibility: Operate comfortably from the "Green Screen" (Mainframe) to the Cloud Console, understanding the security implications at every layer.
• Technical Leadership: Act as a mentor for the development squads (APP1, APP2, APP3), fostering a culture of proactive security rather than reactive patching.
• Modernization Facilitator: Ensure that security requirements do not become a "blocker" but an accelerator for the migration to Cloud, providing clear, implementable security patterns.