Penetration Tester

Budapest, Budapest, HungaryWebsite

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.

About Kyndryl

Kyndryl Holdings, Inc. is the world's largest independent IT infrastructure services provider, headquartered in New York City. Established on November 3, 2021, as a spin-off from IBM, Kyndryl operates with around 90,000 employees across 80 countries and serves approximately 4,600 clients, including 75 of the Fortune 100 companies. The company reported annual revenue of about $17 billion in 2023. Kyndryl specializes in designing, building, managing, and modernizing mission-critical technology systems. Its key offerings include managed infrastructure services, specialized solutions like zCloud and mainframe modernization, and branded products such as Kyndryl Bridge and Vital. The company supports various sectors, including automotive, healthcare, banking, insurance, manufacturing, telecom, government, retail, and utilities, focusing on enhancing digital performance and innovation. Kyndryl emphasizes a strong corporate culture and social responsibility through initiatives like supporting BIPOC entrepreneurship.

Industry

information technology & services

Employees

80,000

4652 engineers

Revenue

$15B

Website

Visit →

Security at Kyndryl

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

Kyndryl's Application Security philosophy is centered on a "security-by-design and zero-trust approach" .
The team prioritizes "leveraging advanced DevSecOps methodologies" to integrate security into the development lifecycle. - Developer Enablement: The approach focuses on "secure coding and regular code reviews" to "address vulnerabilities early" in the lifecycle. - Risk Philosophy: Kyndryl views application security as a component of broader cyber resilience, emphasizing "prioritizing critical assets" and maintaining "24/7 threat defense.".

Security Team

Kyndryl operates a dedicated Chief Information Security Officer (CISO) organization responsible for its enterprise-level IT security management program.
The Cyber Security and Resiliency practice is led by global executives who oversee the company's security strategy and service delivery.
Key Public-Facing Leaders: - Paul Savill, Global Practice Leader, Cyber Security and Resiliency - Kris Lovejoy, Global Head, Strategy (previously led the Security and Resiliency global practice).

Key Initiatives

Kyndryl's AppSec initiatives are heavily focused on DevSecOps integration and automated security checkpoints. - "Shift Left" in Practice: Kyndryl emphasizes the need to "address vulnerabilities early" through "secure coding and regular code reviews." - Vulnerability Management: The process includes "Vulnerability and patch management" with a focus on "prioritizing critical assets." - Secure SDLC Artifacts: The workflow incorporates "quality gates and checkpoints" within their DevSecOps practices. - Recent Initiatives: Kyndryl has highlighted the implementation of "generative AI tools" to modernize DevSecOps, particularly in mainframe environments

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Kyndryl's site