Data Security Engineer – Protect Sensitive Data

HealthFirst; Herminie (PA); On-site; USD 99,000 - 147,000; Full time

Job summary

Healthfirst is seeking a Cyber Security Engineer – Data Security to design, implement, and continuously improve security capabilities protecting sensitive data across the enterprise.

The role focuses on understanding where data resides, how it moves, who can access it, and ensuring appropriate controls across the data lifecycle, including cloud, SaaS, databases, endpoints, and AI environments.

Qualifications

• Technical degree or equivalent experience in security
• Experience in security engineering, threat modeling or incident response is a plus
• Familiarity with data security concepts: discovery, classification, access control, encryption, DLP

Responsibilities

• Design and maintain data security controls across cloud, SaaS, apps, databases, endpoints, and AI platforms.
• Implement data discovery, classification, labeling, and protection for sensitive data.
• Operate DSPM to detect data exposure, misconfigurations and access issues.
• Develop and tune DLP controls across endpoints, cloud, email and SaaS.
• Assess data storage and transmission to recommend appropriate security controls.
• Collaborate with IAM, Privacy and platform teams to enforce least privilege access.
• Support encryption, tokenization, masking, and key management strategies.
• Develop monitoring and detection for suspicious data access and exfiltration.
• Automate data security controls and remediation via APIs and tooling.
• Perform security assessments and threat modeling for data-storing systems.
• Incorporate data protection requirements into system designs with engineering teams.
• Support incident investigations involving data exposure.

Skills

Security engineering

Data security

DSPM

DLP

Cloud security

Python

PowerShell

Threat modeling

Security automation

Zero trust

Education

Technical degree in Computer Science / Cyber Security

Tools

Azure

AWS

GCP

Microsoft Purview

Microsoft Defender

Job description

Healthfirst is seeking a Cyber Security Engineer – Data Security to design, implement, and continuously improve security capabilities protecting sensitive data across the enterprise.

The role focuses on understanding where data resides, how it moves, who can access it, and ensuring appropriate controls across the data lifecycle, including cloud, SaaS, databases, endpoints, and AI environments.