Kyndryl
Security Engineer (Modernization & Hybrid Cloud)
About This Role
About Kyndryl
Kyndryl Holdings, Inc. is the world's largest independent IT infrastructure services provider, headquartered in New York City. Established on November 3, 2021, as a spin-off from IBM, Kyndryl operates with around 90,000 employees across 80 countries and serves approximately 4,600 clients, including 75 of the Fortune 100 companies. The company reported annual revenue of about $17 billion in 2023. Kyndryl specializes in designing, building, managing, and modernizing mission-critical technology systems. Its key offerings include managed infrastructure services, specialized solutions like zCloud and mainframe modernization, and branded products such as Kyndryl Bridge and Vital. The company supports various sectors, including automotive, healthcare, banking, insurance, manufacturing, telecom, government, retail, and utilities, focusing on enhancing digital performance and innovation. Kyndryl emphasizes a strong corporate culture and social responsibility through initiatives like supporting BIPOC entrepreneurship.
Security at Kyndryl
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Kyndryl's Application Security philosophy is centered on a "security-by-design and zero-trust approach" .
- The team prioritizes "leveraging advanced DevSecOps methodologies" to integrate security into the development lifecycle. - Developer Enablement: The approach focuses on "secure coding and regular code reviews" to "address vulnerabilities early" in the lifecycle. - Risk Philosophy: Kyndryl views application security as a component of broader cyber resilience, emphasizing "prioritizing critical assets" and maintaining "24/7 threat defense.".
Security Team
Kyndryl operates a dedicated Chief Information Security Officer (CISO) organization responsible for its enterprise-level IT security management program. The Cyber Security and Resiliency practice is led by global executives who oversee the company's security strategy and service delivery. Key Public-Facing Leaders: - Paul Savill, Global Practice Leader, Cyber Security and Resiliency - Kris Lovejoy, Global Head, Strategy (previously led the Security and Resiliency global practice) Team Size Estimate (as of): Information not publicly available. Active AppSec Job Postings (as of): Information not publicly available.
Key Initiatives
Kyndryl's AppSec initiatives are heavily focused on DevSecOps integration and automated security checkpoints. - Security Champions Program: Information not publicly available. - "Shift Left" in Practice: Kyndryl emphasizes the need to "address vulnerabilities early" through "secure coding and regular code reviews." - Vulnerability Management: The process includes "Vulnerability and patch management" with a focus on "prioritizing critical assets." - Secure SDLC Artifacts: The workflow incorporates "quality gates and checkpoints" within their DevSecOps practices. - Recent Initiatives: Kyndryl has highlighted the implementation of "generative AI tools" to modernize DevSecOps, particularly in mainframe environments.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on LinkedIn