Information Security Engineer

BAMM Staffing; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

BAMM Staffing seeks an Information Security Engineer for a hybrid role in New York City. The role focuses on protecting data, managing insider risk, and governing identities across on-prem and cloud environments.

You will work with DLP and data classification tools, coordinate with security and IT teams, document findings, and respond to incidents. The ideal candidate has 5+ years in information security and strong communication skills.

Qualifications

• 5+ years of experience in information security with focus on data protection, insider risk, or identity governance.
• Hands-on experience with one or more DLP and data classification platforms (e.g., Purview, Symantec, Forcepoint, Netskope).
• Experience managing identity and access governance solutions (e.g., Entra ID Governance, SailPoint, Saviynt, Okta IGA).
• Strong understanding of data classification schemes, sensitive data types, and data handling controls.
• Experience investigating security alerts and incidents involving user behavior and data misuse.
• Familiarity with endpoint, cloud, and SaaS security architectures.
• Strong documentation, communication, and cross-functional collaboration skills.
• Ability to work additional hours as needed.

Skills

Data protection

Insider risk

Identity governance

DLP platforms

Data classification

Incident investigation

Endpoint security

Cloud security

SaaS security

Documentation

Collaboration

Communication

Education

Bachelor's degree in Information Security, Computer Science, Information Technology, or related field

Tools

Microsoft Purview

Symantec

Forcepoint

Netskope

Microsoft Entra ID Governance

SailPoint

Saviynt

Okta IGA

Job description

Information Security Engineer - Hybrid in NYC

REQUIRED CANDIDATE QUALIFICATIONS:

• 5+ years of experience in information security, with direct focus on data protection, insider risk, or identity governance;
• Hands-on experience with one or more DLP and data classification platforms (e.g., Microsoft Purview, Symantec, Forcepoint, Netskope, etc.);
• Experience managing identity and access governance solutions (e.g., Microsoft Entra ID Governance, SailPoint, Saviynt, Okta IGA);
• Strong understanding of data classification schemes, sensitive data types, and data handling controls;
• Experience investigating security alerts and incidents involving user behavior and data misuse;
• Familiarity with endpoint, cloud, and SaaS security architectures;
• Strong documentation, communication, and cross-functional collaboration skills; and
• Ability to work additional hours as needed.

PREFERRED / NICE-TO-HAVE QUALIFICATIONS:

• Experience with Microsoft security ecosystem (Purview, Defender for Endpoint, Defender for Cloud Apps, Entra ID, Sentinel);
• Experience with User and Entity Behavior Analytics (UEBA) or insider risk platforms;
• Knowledge of privacy-by-design principles and employee monitoring considerations;
• Security certifications such as CISSP, CISM, CCSP, GIAC, or vendor-specific certifications;
• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related technical field.