Data Protection & Security Engineer — Remote/Hybrid

First Student; Cincinnati (OH); Hybrid; USD 130,000 - 155,000; Full time

Job summary

First Student is seeking a Data Protection & Security Engineer to own data protection while providing hands-on security engineering across cloud, infrastructure and applications. This practitioner role partners with IT, I&O and Legal to design and operate controls protecting student, employee and operational data across cloud and on‑premises environments.

You will replace a departing senior member and ramp quickly into an active program, holding both data protection and security engineering

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or equivalent experience.
• 7+ years of cybersecurity experience with at least 4 years in data protection, cloud security, or cybersecurity engineering.
• Industry certifications such as SANS/GIAC (e.g., GDSA, GDAT) or CISSP/CISM preferred.

Responsibilities

• Own enterprise data protection risk assessments, classification standards, and control effectiveness evaluations.
• Identify data exposure risk across cloud, SaaS, and on-premises environments.
• Contribute to vulnerability assessments and architecture reviews within the Cybersecurity function.

Skills

Data protection

Cloud security

Cybersecurity engineering

Automation (Python/PowerShell)

Communication

Regulatory knowledge

Education

Bachelor's degree in Computer Science or related field

Tools

M365 Purview

CrowdStrike Falcon Data Protection

AWS CloudTrail

AWS Macie

AWS KMS

SIEM tooling

Rapid7

Job description

First Student is seeking a Data Protection & Security Engineer to own data protection while providing hands-on security engineering across cloud, infrastructure and applications. This practitioner role partners with IT, I&O and Legal to design and operate controls protecting student, employee and operational data across cloud and on‑premises environments.

You will replace a departing senior member and ramp quickly into an active program, holding both data protection and security engineering