Senior Security Engineer Jobs

Kensho Technologies

Location:
United States, New York ▼
Cambridge

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

160000.00 - 190000.00 USD / Year

Save Job

Apply Position

Job Description:

Kensho is S&P Global’s hub for AI innovation and transformation. With expertise in machine learning, natural language processing, and data discovery, we develop and deploy novel solutions to innovate and drive progress at S&P Global and its customers worldwide. Kensho's solutions and research focus on business and financial generative AI applications, agents, data retrieval APIs, data extraction, and much more. As a Security Engineer at Kensho, you are a thoughtful, collaborative, and seasoned technologist who will be working closely with the Infrastructure and product teams to ensure security across a number of systems and web applications. You will help us protect network boundaries, keep systems and network devices against attacks and provide security frameworks and processes to protect confidential data like passwords and client information.

Job Responsibility:

Implement security frameworks to ensure Kensho maintains a security envelope aligned with S&P Global standards
Developing and updating security plans: Planning and managing security projects and initiatives
Emergency response: Demonstrating excellent surveillance and emergency response skills
Identifying and mitigating security vulnerabilities: Perform static and dynamic vulnerability assessments and incorporate tools in the SDLC using commercial and open source tools
Implementing de-escalation techniques: Prioritizing training in de-escalation techniques to effectively deal with conflicts
Maintain a GenAI security posture: Help establish and enable a GenAI security posture at an enterprise scale and have complete oversight of the AI Accelerator Security program
Risk assessment and management: Spotting risky behaviors and configurations in critical infrastructure components to stop network intrusions and preempt cyberattacks
Auditing policies and controls continuously: Driving the cybersecurity process forward by regularly auditing the policies and controls in place
Building a vulnerability management program: Ensuring that people in the organization continuously check for known vulnerabilities and take appropriate steps to remediate them
Design and implement security controls and processes across Kensho and provide monitoring to ensure compliance
Analyze and recommend security practices and tools for engineering teams to incorporate into the software development lifecycle
Execute security architecture reviews for e2e application frameworks
Cloud Security Posture Management (CSPM), working with Infrastructure teams to continuously improve
Support SIEM integration for the security stack

Requirements:

Five or more years of experience as a security engineer
Experience securing modern web applications and distributed data infrastructure in a cross-team setting
Prior experience working with enterprise security technologies such as WAF, CSPM, OAuth2, and SIEM
Strong understanding of cryptography and current best practices
Experience with penetration testing tools, techniques and methodologies and understanding of common vulnerabilities and remediation strategies
Three or more years experience writing code in Python, Javascript, Java, or Go
Experience conducting or facilitating IT security audits
Familiarity with security models for cloud providers such as AWS, Azure and GCP
Familiarity with core networking concepts and standard protocols such as TCP, UDP, and HTTP

Nice to have:

Experience securing services and applications running on Kubernetes
Experience securing DevSecOps pipelines
Experience with incident response
Experience operating within a regulated financial institution or other regulatory environment
Relevant research, publications, and patents

What we offer:

Medical, Dental, and Vision insurance
100% company paid premiums
Unlimited Paid Time Off
26 weeks of 100% paid Parental Leave (paternity and maternity)
401(k) plan with 6% employer matching
Generous company matching on donations to non-profit charities
Up to $20,000 tuition assistance toward degree programs, plus up to $4,000/year for ongoing professional education such as industry conferences
Plentiful snacks, drinks, and regularly catered lunches
Dog-friendly office (CAM office)
Bike sharing program memberships
Compassion leave and elder care leave
Mentoring and additional learning opportunities
Opportunity to expand professional network and participate in conferences and events

Additional Information:

Job Posted:
December 09, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Senior Security Engineer