Data Security Engineer

Cybersecurity Jobs; Chanhassen (MN); On-site; USD 94,000 - 129,000; Full time

Benefits offered by this job

401(k) retirement plan with company-mâ

Paid time off

Medical, dental, vision coverage

Life insurance

Paid sick leave

Training and professional development

Job summary

Cybersecurity Jobs is seeking a data protection-focused professional to operate DSPM, classify sensitive data, and drive remediation across on-premises, cloud, and SaaS environments in a Minnesota-based role. You will implement DLP controls, improve encryption and key management, and maintain least-privilege access, collaborating with security, legal, and IT teams.

The role requires 3+ years in cybersecurity with a focus on data security, strong knowledge of privacy-by-design, and familiarity

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 3+ years of cybersecurity experience in a relevant role, with at least 2 years focused on data security or data protection.
• Strong understanding of modern data security concepts and privacy-by-design principles.
• Knowledge of security/privacy frameworks: NIST CSF, NIST Privacy Framework, CIS.
• Hands-on experience with at least two of DSPM, data classification, DLP, or data access governance tools.
• Experience securing data in public cloud, cloud data warehouse, and SaaS environments.
• Familiarity with PCI DSS, HIPAA, and U.S. state privacy laws (e.g., CCPA/CPRA).
• Knowledge of SIEM and logging platforms; SQL and scripting (Python, PowerShell).

Responsibilities

• Collaborate with tech, data, and analytics teams to embed data protection and privacy-by-design.
• Run and tune a DSPM platform to discover and classify sensitive data across cloud, SaaS, and on-prem environments.
• Lead remediation for overexposed, misclassified, and abandoned datasets, including data exposed to AI tools.
• Support selection, deployment, and tuning of DLP controls across endpoints, email, web, and SaaS channels.
• Partner with infrastructure and Security Architect to improve encryption, tokenization, masking, and key management.
• Maintain least-privilege access to sensitive data and secure cloud data platforms through reviews and guardrails.
• Triage data detection and response alerts and build alerting for anomalous data access/exfiltration with SOC.
• Support incident response for data exposure as a responder and liaison to tech, legal, and business teams.
• Create data security standards, procedures, runbooks, and automations; assist compliance efforts (PCI DSS, HIPAA where applicable).

Skills

3+ years cybersecurity experience

2 years data security experience

modern data security concepts

privacy-by-design principles

NIST CSF

NIST Privacy Framework

CIS

DSPM

data classification

DLP

data access governance tools

encryption

tokenization

PKI

cloud KMS

SIEM

SQL

Python

PowerShell

Education

Bachelor’s Degree in Computer Science, Information Security, or related field

Tools

DSPM

data classification

DLP

data access governance tools

Encryption

tokenization

masking

PKI

cloud KMS

SIEM

Job description

Protect member, vendor, and employee data by operating DSPM, driving remediation, and strengthening privacy and data protection across on-premises, cloud, and SaaS.

Responsibilities

• Collaborate with technology, data, and analytics teams to embed data protection and privacy-by-design into new systems, data pipelines, and products
• Run and tune a DSPM platform to discover and classify sensitive data across cloud, SaaS, and on-premises environments (PII, payment card data, health information, confidential business data)
• Lead remediation for overexposed, misclassified, and abandoned datasets, including data exposed to AI tools and assistants
• Support selection, deployment, and tuning of DLP controls across endpoint, email, web, and SaaS channels, using data classification to drive policy
• Partner with infrastructure and the Security Architect to improve encryption, tokenization, masking, and key management for data at rest and in transit
• Maintain least-privilege access to sensitive data and secure cloud data platforms through access reviews, guardrails, and remediation
• Triage data detection and response alerts and build alerting for anomalous data access and exfiltration with the Security Operations Center
• Support incident response for data exposure as a responder, subject matter expert, and/or liaison to technology, legal, and business teams
• Create data security standards, procedures, runbooks, and automations; support compliance efforts (including PCI DSS and HIPAA where applicable) and share data security knowledge with Security Analysts

Requirements

• Bachelor’s Degree in Computer Science, Information Security, or related field (or an equivalent combination of education and experience)
• 3+ years of experience in cybersecurity or a similar role, with at least 2 years focused on data security or data protection
• Strong understanding of modern data security concepts and privacy-by-design principles
• Deep knowledge of one or more security and privacy frameworks, such as NIST CSF, NIST Privacy Framework, and CIS
• Hands-on experience with at least two of the following: DSPM, data classification, DLP, data access governance tools
• Working knowledge of encryption, tokenization, and key management (including PKI and cloud KMS)
• Experience securing data in public cloud, cloud data warehouse, and SaaS productivity environments
• Familiarity with PCI DSS, HIPAA, and U.S. state privacy laws (for example, CCPA/CPRA)
• Knowledge of SIEM and logging platforms, plus SQL and scripting in Python, PowerShell, or similar
• Excellent customer service, communication, and documentation skills

Technologies

• DSPM
• Data classification
• DLP
• Data access governance tools
• Encryption, tokenization, masking
• Key management (PKI, cloud KMS)
• SIEM and logging platforms
• SQL
• Python, PowerShell
• PCI DSS
• HIPAA
• CCPA/CPRA
• NIST CSF
• NIST Privacy Framework
• CIS

Benefits

• A fully subsidized membership
• Discounts on Life Time products and services
• 401(k) retirement savings plan with company discretionary match (21 years of age and older)
• Training and professional development
• Paid sick leave where required by law
• Medical, dental, vision, and prescription drug coverage
• Short term and long term disability insurance
• Life insurance
• Pre-tax flexible spending and dependent care plans
• Parental leave and adoption assistance
• Paid time off, including 5 to 20 vacation days per calendar year (based on tenure) and paid sick leave
• Deferred compensation plan, if the team member meets the required income threshold

Pay

Salaried position starting at $94,000.00 (or applicable minimum salary, if higher) and pays up to $129,000.00, based on experience and qualifications.

Location: Chanhassen, MN (onsite)