Kinexys System Engineer

Job Requirements

We are looking for a Security Engineer - Risk & Controls, who will be responsible for identifying and assessing technology and security risks, driving remediation efforts, strengthening control frameworks, and partnering with engineering teams to implement secure and compliant solutions. This role spans hands-on security expertise, risk management, governance, and control oversight across blockchain, cloud, and enterprise platforms. Conduct security risk assessments, identify control gaps across applications, infrastructure, cloud, and blockchain environments, and design/assess effective security controls. Drive the remediation of security findings, vulnerabilities, audit issues, and control deficiencies through to closure. Partner with engineering, architecture, and operations teams to integrate security into system design/delivery, perform threat modeling, and participate in solution reviews. Support identity and access management (IAM), secrets management, encryption, and key management practices. Support internal audits, regulatory reviews, compliance assessments, evidence collection, and issue remediation. Develop security policies, standards, procedures, and control documentation while monitoring risk metrics to report to management. Expertise in conducting security risk/control evaluations and driving remediation activities. Strong understanding of standard frameworks such as NIST, ISO 27001, CIS Controls, COBIT, or similar standards. Core understanding of cloud security principles and major providers (AWS, Azure, or Google Cloud Platform). Solid knowledge of Identity and Access Management (IAM), secrets management, encryption, and key management practices. Hands-on experience supporting audits, regulatory assessments, or compliance reviews. Knowledge of blockchain technologies, smart contracts, cryptography, and distributed ledger platforms (e.g., Ethereum, Hyperledger Besu, Canton, Solana, Polygon). Proficiency in modern JavaScript/TypeScript frameworks (e.g., React.js, Angular, or Vue.js). Experience with Secure Software Development Lifecycle (SSDLC), DevSecOps practices, and CI/CD pipeline integration Familiarity with Governance, Risk, and Compliance platforms such as Archer, ServiceNow GRC, or MetricStream.