Kikoff
Senior Security Engineer, Application Security
San Francisco · Senior
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →H-1B wage level
the lottery is wage-weighted — each level is one more entry
This range already reaches Level IV — the maximum four lottery entries.
DOL prevailing wage, 2026-27 wage year · Computer Occupations, All Other (15-1299) · San Francisco-Oakland-Fremont, CA. Wage level is derived by USCIS from the offered wage, occupation and worksite; the occupation shown is inferred from the job title.
Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- That only works if the products they use are safe.
- This role helps shape the Application Security pillar at Kikoff: how code gets written, reviewed, shipped, and defended across our web, mobile, and API surfaces.
- Engineers ship fast here, and increasingly with AI agents writing code alongside them.
Responsibilities
- With record revenue growth in 2025 and a unicorn valuation, we've built a suite of products that help millions of people build credit, access liquidity, and save money.
- Join us if you want to build something meaningful and help millions of people move forward financially.
- We value extreme ownership, clear communication, a strong sense of craftsmanship, and the desire to create lasting work and work relationships.
- Kikoff exists to help millions of people build credit.
- You will drive and help shape the application security roadmap.
- You define the strategy, sequence the work, and drive it to done.
- Drive the application security roadmap: secure SDLC, code review, threat modeling, vulnerability management, and the pentest and bug bounty programs.
- Set the standard for what secure code looks like at Kikoff and build the tooling that enforces it: SAST, SCA, secrets scanning, and dependency policy wired into CI with signal engineers trust.
- Decide how AI-generated code gets reviewed and gated. Design the controls for a codebase where agents are contributors.
- Run the penetration testing and bug bounty programs. Triage, drive remediation, and close the loop with engineering.
Requirements
- 6+ years in security engineering with deep, hands-on application security experience: secure code review, threat modeling, vulnerability triage, and remediation at scale
- Experience securing REST/GraphQL APIs and native mobile applications
- You have run or built a pentest or bug bounty program
- If you're excited about this role and believe you can do the work, we encourage you to apply.
- You write production code. Fluency in at least one of Ruby, Python, Go, or TypeScript, and comfort reading all of them
- You have designed and shipped authentication and authorization systems, not just reviewed them. OAuth/OIDC, session management, MFA, account recovery
- Hands-on with modern AppSec tooling and the judgment to know when it is wrong: SAST, SCA, DAST, secrets scanning, CI/CD integration
- Comfortable in a fintech regulated environment: PCI-DSS, SOC 2, or similar
- Bonus Points
- Securing LLM-backed product features or agentic workloads in production
- Fraud and abuse defense: bot detection, credential stuffing mitigation, device signals
- Security champions or developer education programs you started, not inherited
- Supply chain security depth: dependency provenance, artifact signing, build integrity
- Consumer fintech or financial services background
Compensation
- $268,000 - $321,000 USD
Company info
- We're looking for capability and trajectory, not a perfect checklist match.
- Kikoff is a profitable, pre-IPO fintech company on a mission to empower everyone to achieve financial security.
Equal opportunity
- Kikoff Inc. is an equal opportunity employer.
- We are committed to complying with all federal, state, and local laws providing equal employment opportunities and considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.
- Please reference the following for more information.
Visa & Work Authorization
- in, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class
This listing is sourced directly from Kikoff's careers page and normalized into a canonical job model.