Cloud DSPM Engineer - Data Security

Cognizant

Foster City (CA)

On-site

USD 134,000 - 155,000

Full time

8 days ago

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Discretionary annual incentive program

Job summary

Cognizant is seeking a Data Security Posture Management Engineer to implement and operationalize enterprise DSPM across cloud and SaaS environments. You will focus on data visibility, discovery, classification, governance, and protection across AWS, Azure, M365, and cloud workloads, collaborating with Cloud DevOps, applications, and security teams.

The role requires hands‑on DSPM experience with platforms like Cyera, BigID, Varonis, Wiz, and Netskope DLP, plus strong knowledge of Kubernetes,

Qualifications

7+ years of experience in Data Security, Cloud Security, Security Engineering, or related cybersecurity domain.
Hands‑on experience implementing or supporting DSPM solutions such as Cyera, BigID, Varonis, Wiz, Rubrik DSPM, Securiti.ai, or equivalent platforms.
Strong experience with AWS services, including Amazon EKS, cloud storage, identity, and cloud‑native security integrations.
Hands‑on experience with Microsoft Azure, Azure Kubernetes Service, Microsoft 365, and Microsoft Entra ID.
Experience configuring Microsoft Purview policies for data classification, governance, labeling, and sensitive data protection.
Experience administering Netskope DLP policies, data protection rules, and SaaS or cloud security integrations.
Strong understanding of data discovery, classification, DLP, data governance, access controls, and sensitive data protection.
Familiarity with Kubernetes, cloud‑native architectures, SaaS integrations, and IaC tools such as Terraform, CloudFormation, or Bicep.
Knowledge of security and compliance frameworks such as NIST, ISO 27001, HIPAA, SOX, and GDPR.
AWS/Azure/Microsoft Security CCSP certifications preferred.

Responsibilities

Deploy, configure, maintain, and operationalize DSPM solutions across enterprise cloud, SaaS, and containerized environments.
Integrate DSPM platforms with AWS, Azure, Microsoft 365, and supported SaaS applications and data repositories.
Partner with Cloud DevOps teams and application owners to onboard data sources and workloads into the DSPM platform.
Support DSPM integrations with AWS services and Kubernetes workloads running on Amazon EKS.
Support data security integrations within Microsoft Azure, including workloads and applications running on Azure Kubernetes Service.
Configure Microsoft Purview policies for data discovery, classification, labeling, governance, and sensitive information protection.
Integrate DSPM capabilities with Microsoft Entra ID and Microsoft 365 to support identity‑aware data security controls.
Implement and optimize Netskope DLP policies and integrations to protect sensitive data across cloud, endpoint, and SaaS environments.
Troubleshoot integration, connectivity, classification, and policy enforcement issues across supported security platforms.
Develop implementation documentation, architecture designs, operational runbooks, reports, and continuous improvement recommendations.