Security Engineer (Modernization & Hybrid Cloud)

Job description

Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. The Role At Kyndryl, our Security Consultants are game-changers, constantly pushing the boundaries of what's possible and transforming the way our customers do business. We're looking for a talented individual who thrives in a dynamic environment and is ready to take on the challenge of protecting organizations from threats both known and unknown – being the defender of tomorrow’s digital world. As a Security Consultant, you'll be the guardian of confidentiality, integrity, and availability, ensuring organizations are shielded from the ever-evolving threat landscape. Your expertise will be sought after as you assess, analyze, and implement effective security measures in customer environments, leaving no stone unturned when it comes to safeguarding their most sensitive data. Collaboration will be your forte, as you work closely with clients to understand their unique security requirements and assess their current security posture. Armed with this knowledge, you'll provide expert guidance and recommendations on the best security practices, risk management strategies, and robust security policies that will fortify their defenses. You won't stop at providing advice; you'll roll up your sleeves and get hands-on. Designing and implementing security controls, policies, and procedures will be your playground. You'll work alongside cross-functional teams to deploy state-of-the-art technologies, including firewalls, intrusion detection/prevention systems, access controls, and encryption technologies, ensuring a comprehensive security framework. The thrill of uncovering vulnerabilities and risks is what motivates you. Armed with your extensive knowledge, you'll conduct thorough security assessments, leaving no stone unturned in identifying potential security breaches. Your findings will serve as the foundation for meticulous security audits and reviews, ensuring adherence to policies and procedures. Your reports and findings will be the catalyst for management decisions and actions. In the fast-paced world of cybersecurity, staying ahead of the game is crucial. That's why you'll continuously immerse yourself in the latest security threats, technologies, and best practices. Your recommendations will drive enhancements to the organization's security posture, ensuring it remains at the cutting edge of defense. Your influence won't be limited to systems alone. You'll lend your expertise to the design and review of IT infrastructure, systems, and applications, ensuring they are secure by design from inception. Not only will you make an impact within our organization, but you'll also collaborate with customers and vendors on security assessments, audits, and due diligence activities. Your knowledge and experience will be instrumental in shaping secure collaborations and partnerships. Our consultants are restless for innovation. They are at the edge of technology, changing the way our customers implement business solutions – so, if you’re a problem-solver, an innovative thinker, and a self-starter with a passion high impact assignments which align technology to business outcomes, then we want to hear from you! Apply today to join our team that has a host of exciting projects and customers waiting for you to work with them to solve complex transformation puzzles through technology. Your Future at Kyndryl As a Security Consultant at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts – presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth Who You Are You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others. Key Responsibilities Secure Architecture Design: Define and implement the security blueprint for the coexistence and migration phases, ensuring "Security by Design" in Java microservices and cloud-native databases. Mainframe-to-Cloud Identity Bridge: Design and oversee secure integration patterns between Mainframe Security (RACF) and Cloud Identity Providers (Azure AD/Entra ID), focusing on Zero Trust principles. Application Security (AppSec) for Java: Lead the implementation of SAST, DAST, and SCA within the CI/CD pipeline, specifically for high-concurrency Java applications. Legacy Data Protection: Define encryption, masking, and tokenization strategies for sensitive data residing in DB2 (Mainframe) and VSAM , ensuring secure transit to Cloud databases (PostgreSQL/SingleStore). Security Performance Optimization: Evaluate the performance impact of security controls (encryption overhead, firewall latency, mTLS) to ensure they do not degrade banking transaction speeds. Cloud Infrastructure Hardening: Configure and audit security posture in Azure , including Network Security Groups, Key Vaults, and Private Links for database access. Secure API & Integration: Enforce security standards for API Gateways, ensuring robust OAuth2/OIDC implementation and protection against OWASP Top 10 threats. Incident Response & Forensics: Establish logging and monitoring strategies (SIEM/SOAR) that correlate events between legacy batch processes and modern distributed traces. Required Skills & Experience At least 4-5 years of experience in: 1. Hybrid Infrastructure & Legacy Security Mainframe Security: Deep understanding of RACF (or ACF2/Top Secret), including resource profiles and user access management in COBOL/CICS environments. Legacy Data Access: Experience securing data extraction from DB2 and VSAM file structures during migration phases. Secure Protocols: Advanced knowledge of AT-TLS, SSH tunneling, and secure file transfer (SFTP/FTPS) between Mainframe and Midrange. 2. Cloud & Database Security Cloud Platforms: Extensive experience hardening Azure services (AKS, Azure SQL, Key Vault, Azure Firewall). Modern Databases: Security configuration for PostgreSQL and distributed databases ( SingleStore or equivalent), including Row-Level Security (RLS) and encryption at rest/in transit. Network Security: Design of Hub-and-Spoke architectures, Private Endpoints, and WAF configurations. 3. Application Security & Development Java Security Deep-Dive: Advanced knowledge of the Spring Security ecosystem, JVM security settings, and mitigating vulnerabilities in Java-based microservices. Code Review: Ability to identify security flaws in Java and provide guidance on secure coding practices in COBOL (preventing buffer overflows or unauthorized access logic). DevSecOps: Hands-on experience integrating security tools (Checkmarx, SonarQube, Snyk) into automated pipelines. 4. Cryptography & Performance Cryptographic Standards: Implementation of AES-256, RSA, and ECC; understanding of HSM (Hardware Security Modules) integration. Performance Engineering for Security: Ability to profile application performance to minimize the latency introduced by TLS handshakes and payload encryption. Key Expectations Security-Performance Balance: Deliver security solutions that meet stringent banking regulations without introducing bottlenecks in high-volume transactional flows. Full-Stack Security Visibility: Operate comfortably from the "Green Screen" (Mainframe) to the Cloud Console, understanding the security implications at every layer. Technical Leadership: Act as a mentor for the development squads (APP1, APP2, APP3), fostering a culture of proactive security rather than reactive patching. Modernization Facilitator: Ensure that security requirements do not become a "blocker" but an accelerator for the migration to Cloud, providing clear, implementable security patterns. Being You The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way. What You Can Expect Your career with us isn’t just a job—it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best. From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth. We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success. We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next. Get Referred! If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.