Information Security Engineer

TekValue IT Solutions; Stati Uniti; In loco; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

TekValue IT Solutions is seeking a senior security engineer to lead the implementation of DSPM, DLP, and SASE controls across cloud, on-prem, and SaaS environments. You will own ePHI discovery, classification, and inventory, and drive enforcement of data protection policies while maturing the incident response program.

The role requires hands-on experience with DSPM, DLP, CASB, and PHI handling, plus collaboration with vulnerability management and runbook documentation teams.

Competenze

• 7+ years in security engineering with hands-on DSPM, DLP, and SASE
• Experience leading ePHI discovery across cloud, database, file shares and SaaS
• Ability to implement protection controls and runbooks across environments

Mansioni

• Lead discovery, classification, and inventory of ePHI across cloud, database, file shares, and SaaS
• Deploy and configure a DSPM platform end-to-end
• Tune DLP, CASB, and SASE controls from monitoring to enforcement
• Build guardrails by applying policies for unsanctioned GenAI and shadow IT tools handling PHI
• Integrate asset inventory and data classification to feed the system of record
• Support vulnerability management by validating findings and routing for remediation
• Back up incident response: assist IR plan, investigate data exfiltration and insider-risk events
• Document and handoff: create and maintain runbooks, configurations, and documentation
• Leverage AI daily to improve security outcomes

Conoscenze

Security engineering

DSPM

DLP

SASE

ePHI discovery

Policy enforcement

IR collaboration

Descrizione del lavoro

• Required Experience: 7+ years in security engineering with hands-on implementation of DSPM, DLP, and SASE solutions.
• Own ePHI Discovery: Lead the technical discovery, classification, and inventory of ePHI across cloud, database, file share, and SaaS environments.
• Implement DSPM: Deploy and configure a Data Security Posture Management platform from end to end.
• Tune Data Protection: Mature existing DLP, CASB, and SASE controls, moving from monitoring to enforcement.
• Build Guardrails: Identify and apply policies for unsanctioned GenAI and shadow IT tools, especially those handling PHI.
• Integrate Tooling: Implement supporting tools like asset inventory and data classification to feed the system of record.
• Support Vulnerability Management: Validate findings from scanners, pen tests, and bug bounties, and route them for remediation.
• Back Up Incident Response: Support the established IR plan, investigating data exfiltration and insider-risk events.
• Document & Handoff: Create and maintain runbooks, configurations, and documentation for all implemented controls.
• Leverage AI: Use AI tools daily to improve efficiency and security outcomes.