Kyndryl Security Team

Security at Kyndryl

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

Kyndryl's Application Security philosophy is centered on a "security-by-design and zero-trust approach" .
The team prioritizes "leveraging advanced DevSecOps methodologies" to integrate security into the development lifecycle. - Developer Enablement: The approach focuses on "secure coding and regular code reviews" to "address vulnerabilities early" in the lifecycle. - Risk Philosophy: Kyndryl views application security as a component of broader cyber resilience, emphasizing "prioritizing critical assets" and maintaining "24/7 threat defense.".

The team

Kyndryl operates a dedicated Chief Information Security Officer (CISO) organization responsible for its enterprise-level IT security management program.
The Cyber Security and Resiliency practice is led by global executives who oversee the company's security strategy and service delivery.
Key Public-Facing Leaders: - Paul Savill, Global Practice Leader, Cyber Security and Resiliency - Kris Lovejoy, Global Head, Strategy (previously led the Security and Resiliency global practice).

What they're working on

Kyndryl's AppSec initiatives are heavily focused on DevSecOps integration and automated security checkpoints. - "Shift Left" in Practice: Kyndryl emphasizes the need to "address vulnerabilities early" through "secure coding and regular code reviews." - Vulnerability Management: The process includes "Vulnerability and patch management" with a focus on "prioritizing critical assets." - Secure SDLC Artifacts: The workflow incorporates "quality gates and checkpoints" within their DevSecOps practices. - Recent Initiatives: Kyndryl has highlighted the implementation of "generative AI tools" to modernize DevSecOps, particularly in mainframe environments