What Data Security Engineer Jobs are in the United States?

Job Title: Cyber Security Engineer (Data Scanning)
Location: Vienna, VA, United States
Type: Contract
Contractor Work Model: Hybrid - onsite and remote
Hours: 40.0
Responsibilities
+ Provide technical guidance and collaboration with other Cyber Security Engineers supporting technologies within designated area of focus (Data Scanning)
+ Evaluate technical solutions in response to business challenges
+ Provide thought leadership in support of continuous improvement and service maturation
+ Present technical solutions as needed for knowledge sharing and acceptance
+ Provide project support and status reporting
+ Establish and maintain supporting documentation (architecture/data flow diagrams, runbooks, ServiceNow tickets, user stories and tasks)
+ Attend and participate in team meetings, standups and other team ceremonies
+ Collaborate with partnering teams in support of solution development and deployment
**Requirements**
+ Strong team player, able to communicate and show leadership amongst teams of similarly knowledgeable specialists and Engineers
+ Minimum (3-5) years experience with System design, administration and security
+ Minimum (3-5) years experience with Networking (TCP/IP, Firewall rules, DNS and proxy config)
+ Minimum (3-5) years experience with Data Scanning and Classification tools (BigID, Varonis)
+ Experience working with Incident, Problem, and Change Management
+ Experience with Linux Administration
+ Experience with container platforms (AKS, Docker, Helm)
+ Proficient and professional verbal and written communication skills
+ Practical understanding of machine learning and automation
System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#M2
#LI-EL1
Ref: #851-Rockville-S1
System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

**Calling all innovators - find your future at Fiserv.**
We're Fiserv, a global leader in Fintech and payments, and we move money and information in a way that moves the world. We connect financial institutions, corporations, merchants and consumers to one another millions of times a day - quickly, reliably, and securely. Any time you swipe your credit card, pay through a mobile app, or withdraw money from the bank, we're involved. If you want to make an impact on a global scale, come make a difference at Fiserv.
**Job Title**
Data Security Engineer
**About your role:**
As a Data Security Engineer, you design, implement, and enhance security controls that protect sensitive data across our enterprise. You work closely with cybersecurity, infrastructure, and application teams to embed security into every stage of the technology lifecycle. Your work enables us to safeguard client information, meet regulatory expectations, and maintain trust in our payment and financial services solutions.
**What you'll do:**
+ Design, implement, and maintain advanced data protection and cybersecurity solutions aligned to enterprise security architecture and standards.
+ Assess security vulnerabilities and recommend mitigation strategies using structured risk-based approaches.
+ Collaborate with cross-functional teams to integrate security practices across all phases of the development lifecycle.
+ Conduct regular security assessments and audits to help ensure compliance with industry standards, regulatory requirements, and internal policies.
+ Review security data, logs, and tool outputs to identify control gaps, policy deviations, and threats and continuously enhance security controls.
+ Develop and maintain clear documentation of security processes, technical designs, runbooks, and operational procedures.
+ Partner with stakeholders to define security requirements, support remediation activities, and track closure of identified issues.
+ Support incident response activities by providing subject matter expertise on data protection technologies and configurations.
**Experience you'll need to have:**
+ 6+ years of experience in cybersecurity engineering or operations in an enterprise environment.
+ 3+ years of experience with privileged access management (PAM) and identity and access management (IAM) principles and technologies, including CyberArk or similar tools.
+ 3+ years of experience with systems and network administration in Windows and Unix/Linux environments.
+ 3+ years of experience implementing or supporting authentication tools and protocols such as Security Assertion Markup Language (SAML), PingID, or similar solutions.
+ 3+ years of experience configuring or operating data loss prevention (DLP) tools such as Forcepoint or Broadcom in a large-scale environment.
+ 3+ years of experience with endpoint security or endpoint management tools such as CrowdStrike or Tanium.
+ 3+ years of experience with encryption and data protection tools such as PKWARE or comparable technologies.
+ Bachelor's degree or higher in Computer Science, Information Security, Engineering, or a related field or equivalent combination of education, related experience and/or military experience.
**Experience that would be great to have:**
+ Experience applying cybersecurity and data protection controls in the financial services or payments industry.
+ Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or similar certifications, or an equivalent combination of training and experience.
+ Experience designing and implementing AI/ML-driven security solutions for automated threat detection, endpoint protection, or network anomaly identification within enterprise environments.
**How you'll work:**
+ This role is on-site Monday through Friday. Fiserv considers in-person collaboration to be an essential part of this role as in-person office experience helps you with your overall onboarding experience and leads to stronger productivity.
**Travel:**
This role requires no travel.
**Sponsorship:**
You must currently possess valid and unrestricted U.S. work authorization to be considered for this role. Individuals with temporary visas including, but not limited to, F-1 (OPT, CPT, STEM), H-1B, H-2, or TN, or any candidate requiring sponsorship, now or in the future, will not be considered for this role.
**Benefits at Fiserv:**
+ Fuel Your Life program to support your physical, financial, social, and emotional well-being.
+ Paid holidays and generous time away policies.
+ No-cost mental health support through Employee Assistance Programs.
+ Living Proof program to recognize your peers' extra effort with points redeemable for rewards.
+ Eight Employee Resource Groups to foster a collaborative culture and expand your network.
+ Unparalleled professional growth with training, development, and internal mobility opportunities.
+ Medical, dental, vision, life, and disability insurance options available from day one.
+ Retirement planning and discounted shares with the Employee Stock Purchase Plan.
+ Tuition assistance and reimbursement program.
+ Paid parental, caregiver, and military leave.
\#LI-MJ1
**Salary Range**
$109,000.00 - $182,400.00
_These pay ranges apply to employees in New Jersey and New York. Pay ranges for employees in other states may differ._
It is unlawful to discriminate against a prospective employee due to the individual's status as a veteran.
For incentive eligible associates, the successful candidate is eligible for an annual incentive opportunity which may be delivered as a mix of cash bonus and equity awards in the Company's sole discretion.
Thank you for considering employment with Fiserv. Please:
+ Apply using your legal name
+ Complete the step-by-step profile and attach your resume (either is acceptable, both are preferable).
**Our commitment to Equal Opportunity:**
Fiserv is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, disability, protected veteran status, or any other category protected by law.
If you have a disability and require a reasonable accommodation in completing a job application or otherwise participating in the overall hiring process, please contact . Please note our AskHR representatives do not have visibility to your application status. Current associates who require a workplace accommodation should refer to Fiserv's Disability Accommodation Policy for additional information.
**Note to agencies:**
Fiserv does not accept resume submissions from agencies outside of existing agreements. Please do not send resumes to Fiserv associates. Fiserv is not responsible for any fees associated with unsolicited resume submissions.
**Warning about fake job posts:**
Please be aware of fraudulent job postings that are not affiliated with Fiserv. Fraudulent job postings may be used by cyber criminals to target your personally identifiable information and/or to steal money or financial information. Any communications from a Fiserv representative will come from a legitimate Fiserv email address.

Last year our HCA Healthcare colleagues invested over 156,000 hours volunteering in our communities. As an engineer with HCA Healthcare you can be a part of an organization that is devoted to giving back!
**Job Summary and Qualifications**
We are enabling the organization to leverage AI technologies while maintaining strong security, privacy, and compliance standards. The Senior AI/Data Security Engineer partners closely with AI and data product teams to implement and operationalize security controls across AI platforms and data solutions.
This role focuses on hands-on security engineering, vulnerability management, threat modeling, and secure pipeline integration. The position supports established AI security frameworks and collaborates with architects and senior security leaders to ensure AI and data products meet organizational security standards.
**Major Responsibilities**
**Security Engineering & Implementation**
+ Conduct security testing and vulnerability assessments aligned with enterprise data security standards.
+ Perform threat modeling for AI and data solutions to identify and mitigate security risks.
+ Integrate automated security scans and controls into CI/CD pipelines.
+ Ensure security checks are incorporated into data and model deployment pipelines.
+ Implement and support monitoring tools for data/MLOps environments to detect potential security incidents.
**AI & Data Security Support**
+ Apply established AI security frameworks and standards to ML and LLM-based solutions.
+ Assist in operationalizing measurable AI security objectives and KPIs.
+ Collaborate with Enterprise Security Architecture and AI Security Architects to implement roadmap initiatives.
+ Stay current on emerging AI security threats, including adversarial ML and LLM risks.
**Collaboration & Delivery**
+ Partner with developers and product teams to embed secure-by-design principles into AI and data products.
+ Collaborate with Legal, Privacy, Risk, and Information Protection teams to support timely security reviews and approvals.
+ Participate in third-party security assessments and vulnerability testing engagements.
+ Serve as a security advisor to development pods on operationalizing threat detection and vulnerability remediation.
**Documentation, Monitoring & Reporting**
+ Document identified security issues and track remediation through resolution.
+ Contribute to security reporting and dashboards that provide visibility into AI and data security posture.
+ Maintain security documentation aligned with regulatory and enterprise requirements.
+ Ensure compliance with applicable healthcare regulations (e.g., HIPAA, HITECH).
**Training & Continuous Improvement**
+ Support security awareness initiatives for AI and data development teams.
+ Recommend security improvements where gaps are identified and track implementation progress.
+ Continuously refine controls and processes based on lessons learned and evolving threat landscapes.
+ Performs other duties as assigned
+ Practices and adheres to the "Code of Conduct" philosophy and "Mission and Value Statement."
**What qualifications you will need:**
+ Bachelors Degree in Information Systems preferred
+ Bachelor's Degree required
+ Five or more years of experience in a security, cloud or software engineering role
**Licenses, Certifications and Training**
+ CISSP
+ CISM
+ CEH
+ Cloud security certifications (e.g., Google Cloud, AWS, Azure)
**Knowledge, Skills Abilities, Behaviors:**
**Required:**
+ Experience securing cloud environments (preferably Google Cloud).
+ Strong understanding of encryption, IAM, data protection, and cloud-native security controls.
+ Experience integrating security controls into CI/CD pipelines.
+ Proficiency in Python or other scripting languages used in Data/ML environments
+ Knowledge of HIPAA, HITECH, and healthcare regulatory requirements.
+ Familiarity with DevSecOps practices, CSPM tools, and security monitoring platforms.
+ Strong analytical and problem-solving skills.
+ Ability to collaborate effectively with cross-functional teams.
**Preferred:**
+ Familiarity with ML lifecycle, model training workflows, and LLM security considerations.
+ Knowledge of adversarial ML risks and AI security research.
+ Experience with data cataloging and classification tools.
**Behavioral Competencies**
+ Demonstrates integrity and commitment to organizational values.
+ Communicates clearly with technical and non-technical stakeholders.
+ Makes informed decisions within defined governance structures.
+ Drives execution through collaboration rather than formal authority.
+ Adapts effectively to evolving security and AI landscapes.
**Benefits**
HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:
+ **Comprehensive benefits** for medical, prescription drug, dental, vision, behavioral health and telemedicine services
+ **Wellbeing support,** including free counseling and referral services
+ **Time away from work** programs for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence
+ **Savings and retirement resources** , including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling
+ **Education support** through tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing
+ **Additional benefits** for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts
Learn more about Employee Benefits ( Eligibility for benefits may vary by location._**
HCA Healthcare has been recognized as one of the World's Most Ethical Companies® by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.
"There is so much good to do in the world and so many different ways to do it."- Dr. Thomas Frist, Sr.
HCA Healthcare Co-Founder
Be a part of an organization that invests in you! We are reviewing applications for our eng opening. Qualified candidates will be contacted for interviews. Submit your application and **_help us raise the bar in patient care!_**
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Job Number: R

The Opportunity

As a senior data engineer architect on our team, you’ll be integral to architecting, deploying, and operating data and data security solutions across various DoW clients in the Indo-Pacific. Create and employ new architectures to meet client requirements adhering to Zero Trust best practices and IC data header guidelines. Interface with key stakeholders and users, including internal delivery and engineering teams as well as cybersecurity professionals, to assure resilient data‑centric delivery. Design and implement custom policy to ensure positive control of data across hybrid cloud environments. You mentor the next set of data engineers to help them grow into tomorrow’s data architects.

You Have

• 3+ years of experience designing, deploying, and configuring data security solutions
• Experience with Data Security Posture Management (DSPM) tools such as Varonis or BigID
• Experience with Data Loss Prevention (DLP) tools such as Forcepoint, Trellix, or Symantec
• Experience with data labeling and tagging solutions such as Purview, Fortra, or Titus
• Experience documenting and diagramming technical architectures
• Knowledge of Virtru Data Security Platform (DSP) and Kafka
• Secret clearance
• HS diploma or GED

Nice If You Have

• 5+ years of experience designing, deploying, and configuring data security solutions
• Experience working in federal, DoW, or IC agency environments
• Experience managing and maintaining containerization solutions
• Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems
• Knowledge of Trusted Data Format (TDF) and Attribute Based Access Control (ABAC)
• Knowledge of NexLabs or Keycloak
• Top Secret clearance
• Bachelor's degree in an IT, Cybersecurity, or Engineering field
• CySA+, GCIH, GSEC, or CASP+ Certification

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Compensation

Salary range: $86,900.00 to $198,000.00 (annualized USD). Closing within 90 days from posting date.

Work Model

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.

#J-18808-Ljbffr

As a key member of the global cybersecurity team, the Data Security Engineer is responsible for designing, implementing, and maintaining the enterprise’s data protection controls and platforms. This hands‑on technical role focuses on securing sensitive data across cloud and on‑prem environments through data discovery, classification, DLP, DSPM, AI and anonymization technologies.

This is an ideal opportunity for a data‑focused security engineer who brings curiosity, precision, and a continuous improvement mindset to building scalable, effective defenses that protect our most valuable data assets.

WHAT YOU'LL DO:

• Configure, deploy, and maintain Data Loss Prevention (DLP) and Data Security Posture Management (DSPM) tools across cloud, endpoint, and collaboration platforms.
• Implement technology to discover, classify, and tag structured and unstructured data across databases, file repositories, and SaaS environments.
• Develop and tune DLP and DSPM policies using data‑driven insights to reduce false positives and improve detection fidelity.
• Design and apply technical controls for secure data transmission, storage, and anonymization in alignment with organizational standards.
• Drive continuous process improvement by identifying opportunities to leverage AI and automation in data discovery, classification, and protection workflows.
• Support data discovery and mapping initiatives to ensure visibility of sensitive and regulated data across systems.
• Integrate data protection technologies with SIEM/SOAR platforms to enable automated alerting, orchestration, and continuous process optimization of incident response workflows.
• Assist in the investigation and remediation of data‑related security incidents, including data exfiltration or insider threat cases.
• Collaborate with Cloud, Application, Identity, and Infrastructure teams to embed data security by design into enterprise systems and services.
• Contribute to developing and maintaining data security standards, processes, and technical documentation.
• Stay current on emerging data protection technologies, privacy regulations, and best practices to continuously evolve controls and detection logic.

WHAT YOU'LL BRING:

• Hands‑on experience implementing and managing data security tools across cloud, endpoint, and SaaS environments.
• Strong understanding of data protection principles , including data discovery/classification, encryption, masking, anonymization, and secure data transmission and storage.
• Familiarity with integrating data security controls with monitoring platforms and supporting incident response activities related to data exfiltration or misuse.
• Working knowledge of cloud environments (AWS, Azure, GCP) and how data flows, access controls, and storage mechanisms operate in hybrid architectures.
• Proficiency with scripting or automation tools (Python, PowerShell, etc.) to support data protection workflows, integrations, and policy management.
• Experience applying automation and AI/ML techniques to improve security operations, reduce manual processes, and enhance decision‑making.
• Strong analytical, troubleshooting, and problem‑solving skills with high attention to detail and accuracy.
• Excellent written and verbal communication skills, with the ability to explain complex technical concepts clearly to varied audiences.
• Ability to collaborate effectively across global teams, build strong working relationships, and operate in a fast‑paced, dynamic environment.
• Demonstrated commitment to continuous learning and staying current with emerging data security technologies and threats.

REQUIREMENTS:

• 5+ years of experience in cybersecurity, information security, or data protection roles.
• Experience implementing enterprise DLP or DSPM solutions in cloud and hybrid environments.
• Professional certifications such as CISSP, CISM, GIAC strongly preferred.

The pay range for this position is $125,000-$165,000/yr USD.

Equal Employment Opportunity

Skechers is committed to providing a safe, inclusive, and respectful work environment. Skechers provides equal employment opportunities for all employees and applicants for employment without regard race, color, religion, gender, gender identification and expression, national origin, marital status, age, disability, genetic information, military status, sexual orientation, or any other protected characteristic established by local, state or federal law.

Reasonable Accommodation

Applicants for employment who require a reasonable accommodation to apply for a job should request appropriate accommodation by emailing To perform this job successfully, an individual must be able to perform each job responsibility satisfactorily. The skills, abilities and physical demands described are representative of those duties that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities, who are otherwise qualified for the job position, to perform the essential functions.

#J-18808-Ljbffr

As a key member of the global cybersecurity team, the Data Security Engineer is responsible for designing, implementing, and maintaining the enterprise’s data protection controls and platforms. This hands-on technical role focuses on securing sensitive data across cloud and on-prem environments through data discovery, classification, DLP, DSPM, AI and anonymization technologies.

This is an ideal opportunity for a data-focused security engineer who brings curiosity, precision, and a continuous improvement mindset to building scalable, effective defenses that protect our most valuable data assets.

What You'll Do

• Configure, deploy, and maintain Data Loss Prevention (DLP) and Data Security Posture Management (DSPM) tools across cloud, endpoint, and collaboration platforms.
• Implement technology to discover, classify, and tag structured and unstructured data across databases, file repositories, and SaaS environments.
• Develop and tune DLP and DSPM policies using data-driven insights to reduce false positives and improve detection fidelity.
• Design and apply technical controls for secure data transmission, storage, and anonymization in alignment with organizational standards.
• Drive continuous process improvement by identifying opportunities to leverage AI and automation in data discovery, classification, and protection workflows.
• Support data discovery and mapping initiatives to ensure visibility of sensitive and regulated data across systems.
• Integrate data protection technologies with SIEM/SOAR platforms to enable automated alerting, orchestration, and continuous process optimization of incident response workflows.
• Assist in the investigation and remediation of data-related security incidents, including data exfiltration or insider threat cases.
• Collaborate with Cloud, Application, Identity, and Infrastructure teams to embed data security by design into enterprise systems and services.
• Contribute to developing and maintaining data security standards, processes, and technical documentation.
• Stay current on emerging data protection technologies, privacy regulations, and best practices to continuously evolve controls and detection logic.

What You'll Bring

• Hands-on experience implementing and managing data security tools across cloud, endpoint, and SaaS environments.
• Strong understanding of data protection principles, including data discovery/classification, encryption, masking, anonymization, and secure data transmission and storage.
• Familiarity with integrating data security controls with monitoring platforms and supporting incident response activities related to data exfiltration or misuse.
• Working knowledge of cloud environments (AWS, Azure, GCP) and how data flows, access controls, and storage mechanisms operate in hybrid architectures.
• Proficiency with scripting or automation tools (Python, PowerShell, etc.) to support data protection workflows, integrations, and policy management.
• Experience applying automation and AI/ML techniques to improve security operations, reduce manual processes, and enhance decision-making.
• Strong analytical, troubleshooting, and problem-solving skills with high attention to detail and accuracy.
• Excellent written and verbal communication skills, with the ability to explain complex technical concepts clearly to varied audiences.
• Ability to collaborate effectively across global teams, build strong working relationships, and operate in a fast-paced, dynamic environment.
• Demonstrated commitment to continuous learning and staying current with emerging data security technologies and threats.

Requirements

• 5+ years of experience in cybersecurity, information security, or data protection roles.
• Experience implementing enterprise DLP or DSPM solutions in cloud and hybrid environments.
• Professional certifications such as CISSP, CISM, GIAC strongly preferred.

The pay range for this position is $125,000-$165,000/yr USD.

About Skechers

Skechers, a global Fortune 500® company, develops and markets a diverse range of lifestyle and performance footwear, apparel, and accessories. Serving over 180 countries and territories, Skechers connects customers to products through department and specialty stores, e-commerce and digital stores, and through our more than 5,300 Skechers retail locations.

Equal Employment Opportunity

Skechers is committed to providing a safe, inclusive, and respectful work environment. Skechers provides equal employment opportunities for all employees and applicants for employment without regard race, color, religion, gender, gender identification and expression, national origin, marital status, age, disability, genetic information, military status, sexual orientation, or any other protected characteristic established by local, state or federal law.

Reasonable Accommodation

Applicants for employment who require a reasonable accommodation to apply for a job should request appropriate accommodation by emailing

To perform this job successfully, an individual must be able to perform each job responsibility satisfactorily. The skills, abilities and physical demands described are representative of those duties that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities, who are otherwise qualified for the job position, to perform the essential functions.

#J-18808-Ljbffr

Mindlance is a national recruiting company which partners with many of the leading employers in the Life Sciences, IT, and Financial Services sectors, feel free to check us out at

Job Description

Job Title: Data Security Engineer
Duration: 12+ months
Location: Auburn Hills, MI

Job Description:

Candidates come ready to protect the enterprise landscape of data and computer systems. An International organization focused on secure, next generation data infrastructure is seeking a Data Security Engineer who has a passion for security coupled with large-scale know-how. As part of the Chief Information Security Officer’s team, responsibilities of the Data Security Engineer will include, but not be limited to:

• Team up with the usual suspects (a.k.a., cross‑functional IT members) to determine the “best path forward” plan to securing the environment through controls, scanning, remediation, and hardening.
• Actively identify security vulnerabilities, threats, and exposures within the enterprise (servers, applications, and databases).
• Bring your “A” game to security testing techniques (scanning, auditing, and penetration testing).
• Identify concerns of residual risk, vulnerabilities, and other security exposures due to legacy systems or configuration errors.
• Stay sharp by identifying new‑to‑market solutions that lead to best‑in‑class security practices.
• Serve as security sense‑check for IT project delivery and server lifecycle build process.
• Join forces with the ranks of Information Security leadership to develop strategies and plans to enforce security requirements and address identified risks.
• Report security metrics for dynamic dashboards and executive reviews.
• Do the right thing by aligning cutting‑edge data and systems security practices to the law of the land (regulations and policies).
• Lend expertise to know when risk may be acceptable.
• Ensure security is top of mind.
• Other challenging opportunities as assigned.

Required Skills and Education:

• Operational knowledge and skills (4+ years preferred) related to general industry security standards for application security, vulnerability management, and overall data security.
• Self‑motivated and able to plan and carry out responsibilities with minimal direction and supervision.
• Excellent decision‑making, analytic, and organizational skills.
• Strong written and verbal communication skills.
• Superior interpersonal skills (“team player” characteristics) and professional demeanor at all levels of the organization.
• Bachelor’s Degree in Computer Science, Information Technology, Management Information Systems, or Software Engineering. NOTE: A combination of education and experience equaling at least a Bachelor’s degree will also be considered.
• Working knowledge of common network devices as well as Windows and Unix operating systems.
• Familiarity with industry standards regarding system and application hardening and associated scanning tools.

Demonstrated Technical Experience:

• Vulnerability scanners
• Application security testing
• Security and technology controls

Desired Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Manager (CISM)
• GIAC Security Leadership (GSLC)
• GIAC Information Security Professional (GISP)
• GIAC Certified Web Application Defender (GWEB)

Travel Requirement: Limited International travel may be required.

#J-18808-Ljbffr

Opportunity

For a major financial services client, we are leading an enterprise data security strategy and implementation program focused on securing sensitive data through encryption, tokenisation, RBAC, data masking, DLP, and other advanced data protection techniques.

• Work closely with client stakeholders to understand technical requirements and applicable security, regulatory, and procedural controls.
• Develop security requirements and specifications for security policies.
• Identify appropriate security techniques such as Encryption (FPE, AES, Transparent) and Tokenisation (SST, Vaultless, Vault-based) using Protegrity, based on PII data classifications.
• Analyse upstream and downstream application dependencies to ensure proper configuration and application of security protocols.
• Maintain strong knowledge of data privacy regulations and compliance frameworks (GDPR, CCPA, HIPAA, SOC, NIST).
• Design, configure, and implement data security tool stacks such as Protegrity, MicroFocus Voltage, Imperva, Immuta, Privacera, and Thales.
• Provide regular updates for weekly status reports and project logs (issues, risks, action items, progress).
• Install, configure, and implement Data Protection Platforms across on‑premises and cloud environments.
• Design and deploy Protegrity Vaultless Tokenisation, Encryption, and Masking solutions to protect PII, PHI, PCI, and other sensitive data.
• Work with API security and Protegrity SDKs to support microservices and cloud-native applications.
• Implement Protegrity Security Policies, User Access Controls, Key Management, and Data Discovery features.
• Troubleshoot and optimise Protegrity configurations for performance and scalability.
• Develop and maintain technical documentation for data security implementations.
• Train and mentor technical teams on data security tools, standards, and policies.

Experience Required

• 8+ years of industry experience implementing data security and compliance requirements.
• 4+ years designing and implementing data security policies, controls, and governance.
• 2+ years with cloud platforms (AWS, Azure, GCP) and cloud-native security services.
• Strong conceptual and hands‑on experience with data protection techniques: encryption, tokenisation, data masking, RBAC/ABAC, auditing, and monitoring.
• Experience with leading data security tools such as Protegrity, Thales Cipher Trust (Vormetric), OpenText Voltage, etc.
• Deep understanding of cloud architecture with emphasis on cloud security.
• Experience administering Data Security/Privacy/Governance platforms, including policy configuration, upgrades, and patch management.
• Proficiency in encryption techniques (AES, FPE, TDE, PKI) and tokenisation frameworks using Protegrity (must‑have).
• Experience with Key Management Solutions (KMS, HSMs, Vaults).
• Hands‑on integration of data security in cloud environments (AWS KMS, Azure Key Vault, GCP KMS).
• Strong communication skills, both written and verbal, with the ability to engage business and technical stakeholders.
• Ability to multitask, work independently, and coordinate with onsite teams.
• Bachelor’s degree in computer science, Information Systems, Cybersecurity, or a related field (or equivalent experience).

Cloud Hybrid is an equal opportunity employer inclusive of female, minority, disability and veterans, (M/F/D/V). Hiring, promotion, transfer, compensation, benefits, discipline, termination and all other employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, age, disability, national origin, citizenship/immigration status, veteran status or any other protected status. Cloud Hybrid will not make any posting or employment decision that does not comply with applicable laws relating to labor and employment, equal opportunity, employment eligibility requirements or related matters. Nor will Cloud Hybrid require in a posting or otherwise U.S. citizenship or lawful permanent residency in the U.S. as a condition of employment except as necessary to comply with law, regulation, executive order, or federal, state, or local government contract.

#J-18808-Ljbffr

Responsibilities include:

• Design and implement comprehensive data security architectures, focusing on database platforms (primarily SQL Server).
• Develop and maintain enterprise-wide encryption strategies for securing structured and unstructured data both in transit and at rest, on-premise and in the cloud.
• Enhance logging, monitoring and SecOps capabilities of enterprise databases and other data stores.
• Configure and optimize Identity and Access Management (IAM) solutions across data platforms and repositories to align with least privilege principles.
• Implement Data Loss Prevention (DLP) strategies and controls.
• Implement and maintain Information Rights Management (IRM) and Digital Rights Management (DRM) solutions.
• Design and implement data tokenization strategies where appropriate.
• Secure data processing pipelines and ensure appropriate controls for data workflows.
• Create and maintain data security documentation, including policies, procedures, and standards.
• Collaborate with development teams to ensure security best practices in data handling.
• Conduct vulnerability assessments of the firm’s database architecture and associated data storage and processing systems.
• Assist in monitoring and managing security patching and upgrade processes for database platforms.

Qualifications

• Bachelor's degree in computer science, cybersecurity, or a related technical field.
• 6+ years of experience in data/database security engineering and governance.
• Deep expertise in database security, particularly SQL Server.
• Comprehensive understanding of data warehouse/data lake architectures and tools, particularly Databricks.
• Subject‑matter expertise in object storage (e.g., S3, Azure Blob) and related security.
• Understanding of Active Directory Delegation (constrained vs. unconstrained) and associated best practices.
• Experience with third‑party SQL Server security governance and monitoring products (e.g., Idera, Solarwinds).
• Extensive knowledge of encryption technologies for both structured and unstructured data.
• Broad knowledge of secure data/file sharing solutions and ETL workflows.
• Experience designing and implementing data tokenization solutions.
• Experience with data classification and DLP technologies.
• Scripting/automation capabilities (e.g., SQL, PowerShell, Python).
• Commitment to the highest ethical standards.
• Education from an Ivy League college is preferred or a huge plus.

Additional Information

All information will be kept confidential according to EEO guidelines.

Job Location

Location TBD.

#J-18808-Ljbffr