Data Protection & Security Engineer — Remote/Hybrid

First Student, Inc.; Cincinnati (OH); Hybrid; USD 130,000 - 155,000; Full time

Job summary

First Student, Inc. is seeking a Data Protection & Security Engineer to own data protection strategy and provide hands-on security engineering across cloud, on-premises, and data environments.

You will partner with IT, I&O, and Legal to design controls and validate outcomes, ramping quickly into an active program as a key member of the cybersecurity team. The role requires 7+ years in cybersecurity with strong experience in data protection and cloud security, plus certifications.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
• 7+ years of cybersecurity experience with at least 4 years in data protection, cloud security, or cybersecurity engineering.
• Industry certifications such as SANS/GIAC (GDSA/GDAT) or CISSP/CISM preferred.

Responsibilities

• Own enterprise data protection risk assessments, classification standards, and control effectiveness evaluations.
• Design and define data protection control requirements for DLP, encryption, key management, and data governance.
• Monitor for data misuse, exfiltration, and policy violations; support SOC workflows and alert quality improvements.
• Lead Cybersecurity response activities for data exposure incidents and remediation oversight.
• Develop and maintain data protection policies aligned with FERPA, CCPA, and other laws; drive data classification framework.

Skills

Python scripting

Data protection

Cloud security

Security engineering

Communication

Education

Bachelor’s degree in Computer Science or Information Systems

Tools

M365 Purview

CrowdStrike Falcon Data Protection

SIEM

Rapid7

AWS security services

Job description

First Student, Inc. is seeking a Data Protection & Security Engineer to own data protection strategy and provide hands-on security engineering across cloud, on-premises, and data environments.

You will partner with IT, I&O, and Legal to design controls and validate outcomes, ramping quickly into an active program as a key member of the cybersecurity team. The role requires 7+ years in cybersecurity with strong experience in data protection and cloud security, plus certifications.