Data Security Engineer: DSPM, DLP & Cloud Protection

Healthfirst; United States; On-site; USD 100,000 - 155,000; Full time

Benefits offered by this job

Health insurance

401k contributions

Dental and vision coverage

Incentive programs

Job summary

Healthfirst is hiring a Cyber Security Engineer - Data Security to design, implement, and continuously improve data protection across cloud, SaaS, applications, databases, endpoints, and AI platforms.

The role emphasizes DSPM/DLP, data discovery, labeling, and protection, with collaboration across Security, Infrastructure, Cloud, Data, Application, and AI teams to embed robust data security controls throughout the enterprise.

Qualifications

• Bachelor’s or higher in CS/Cyber Security or equivalent work experience.
• Experience in security engineering, network penetration, incident response, threat hunting, or governance risk & compliance (2 of).
• Hands-on data protection technologies such as DLP, DSPM, or related platforms.

Responsibilities

• Design, implement, and maintain data security controls across cloud, SaaS, apps, databases, endpoints, and AI platforms.
• Develop and tune DSPM, DLP, and data discovery/classification capabilities.
• Ensure least-privilege access in collaboration with IAM and application teams.
• Automate data security controls and remediation using APIs and scripting.
• Support encryption, tokenization, masking, and key-management strategies.
• Lead threat modeling and security assessments for data-storing/processing systems.
• Collaborate with data, cloud, app, and AI teams to embed data protection in system designs.

Skills

Security engineering

Data security

DSPM

DLP

IAM

Cloud security

Python

PowerShell

APIs

Security automation

Education

Technical Degree in Computer Science or Cyber Security

High School Diploma/GED with equivalent work experience

Tools

Azure

AWS

Google Cloud

Job description

Healthfirst is hiring a Cyber Security Engineer - Data Security to design, implement, and continuously improve data protection across cloud, SaaS, applications, databases, endpoints, and AI platforms.

The role emphasizes DSPM/DLP, data discovery, labeling, and protection, with collaboration across Security, Infrastructure, Cloud, Data, Application, and AI teams to embed robust data security controls throughout the enterprise.