Data Security Engineer: DSPM & DLP Specialist

Healthfirst; New York (NY); On-site; USD 108,000 - 156,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k contributions

Incentive programs

Job summary

Healthfirst in New York seeks a Cyber Security Engineer - Data Security to design and implement data protection across cloud, SaaS, apps, and databases. You will map data lifecycles, enforce controls, and collaborate with Security, Infrastructure, Data, and AI teams to scale DSPM and DLP capabilities.

Hands-on engineering focus with encryption, key management, and access controls; you will automate security tasks via APIs and scripts, perform threat modeling, and support incident investigations

Qualifications

• Technical degree in CS, cyber security or equivalent experience.
• Entry-level experience in security engineering, network penetration, incident response, threat hunting, or governance risk & compliance.

Responsibilities

• Design, implement, and maintain enterprise data security controls across cloud, SaaS, applications, databases, endpoints, and AI platforms.
• Implement and improve data discovery, classification, labeling, and protection for sensitive data.
• Engineer and operate DSPM to identify sensitive data exposure and misconfigurations.
• Develop and tune DLP across endpoint, cloud, email, collaboration, and SaaS environments.
• Assess how data is stored, processed, transmitted, and accessed and recommend controls.
• Identify over-privileged access and work with IAM and platform teams on least-privilege access.
• Support encryption, tokenization, masking, secrets protection, and key-management strategies.
• Develop monitoring and detection for data exfiltration and unauthorized access.
• Automate data security controls and remediation using APIs and scripting.
• Perform security assessments and threat modeling for systems storing sensitive information.
• Collaborate with engineering teams to incorporate data protection in designs.
• Support incident investigations involving potential data exposure.
• Develop security standards and engineering guidance for data protection.

Skills

Security engineering

Network penetration

Incident response

Threat hunting

Governance risk & compliance

Education

Technical Degree in Computer Science/Cyber Security or High School Diploma/GED

Job description

Healthfirst in New York seeks a Cyber Security Engineer - Data Security to design and implement data protection across cloud, SaaS, apps, and databases. You will map data lifecycles, enforce controls, and collaborate with Security, Infrastructure, Data, and AI teams to scale DSPM and DLP capabilities.

Hands-on engineering focus with encryption, key management, and access controls; you will automate security tasks via APIs and scripts, perform threat modeling, and support incident investigations