Information Security Engineer and Data Protection

Lumenalta; United States; Remote; USD 72,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401K Contribution

Paid time off

Job summary

Lumenalta is seeking an experienced Information Security Engineer to lead ePHI discovery and inventory across cloud storage, databases, and SaaS apps. You will implement a DSPM platform end to end, connect data sources, classify data, and work with owners to fix misconfigurations.

The role focuses on maturing DLP and SASE controls, integrating asset inventory tools, and supporting vulnerability remediation and incident response.

Qualifications

• 7+ years of security engineering with end-to-end tool deployment.
• Hands-on experience with DSPM, data discovery, or data classification.
• Experience implementing and tuning DLP and SASE, CASB, and cloud data protection.

Responsibilities

• Own ePHI discovery and inventory across cloud storage, databases, file shares, and SaaS apps; keep inventory accurate as systems change.
• Implement a DSPM platform end to end; connect data sources, tune classifiers, identify over-exposed data, and partner with owners to fix access.
• Mature DLP and SASE controls; tune policies to reduce false positives; build repeatable response processes for PHI movement events.

Skills

Security engineering

AI tools usage

Strong communication

Tools

DSPM platform

data discovery

data classification

DLP & SASE

CASB

Cloud data protection

Job description

Information Security Engineer and Data Protection1. Home2. Jobs3. Information Security Engineer and Data Protection# Information Security Engineer and Data ProtectionInformation Security and Cybersecurity#### About the RoleWe are seeking an experienced, highly technical Information Security Engineer with a proven track record of implementing data protection tools end to end. In this role, you will lead ePHI discovery and inventory work from deployment through day-to-day operation, working from a defined strategy set by security leadership. You will implement a data security posture management (DSPM) platform and related tooling, mature existing DLP and SASE controls, and build an accurate, well-maintained inventory of where ePHI lives across cloud and SaaS environments. You will also support vulnerability remediation and back up incident response. The ideal candidate is hands-on, communicates clearly, and uses AI to work more efficiently.#### What You'll Be Doing* Own ePHI discovery and inventory, finding, classifying, and inventorying ePHI across cloud storage, databases, file shares, and SaaS applications, and keeping that inventory accurate as systems change.* Implement a DSPM platform end to end, connecting data sources, tuning classifiers, identifying sensitive data that is over-exposed, unencrypted, or broadly accessible, and partnering with system owners to right-size access and fix misconfigurations.* Integrate supporting tooling such as asset inventory and data classification so discovery results feed the system of record, documenting configurations and runbooks along the way.* Mature DLP and SASE controls across the secure web gateway, CASB, DLP, and zero-trust stack by tuning policies to reduce false positives and negatives, strengthening enforcement, and building repeatable response processes for PHI movement events.* Establish GenAI and shadow IT guardrails by identifying unsanctioned AI and SaaS tools and applying policies that enable safe use while blocking what should not be allowed. Support the vulnerability remediation lifecycle by monitoring critical public vulnerabilities, validating bug bounty, pen test, and scanner findings, routing them to the right teams, and confirming fixes.* Back up incident response using the established plan when the primary responder is unavailable, and investigate data exfiltration and insider risk events surfaced by data protection controls.* Partner with GRC by handing technical control gaps to the GRC analyst for tracking.* Support security operations including security tooling administration, TLS inspection exceptions, and technical off-boarding.#### What We're Looking For* Experience: 7+ years in security engineering, with a proven track record of implementing security tools end to end, not only operating them.* Data Security Platforms: Hands-on implementation experience with DSPM, data discovery, or data classification platforms.* DLP and SASE: Hands-on experience implementing and tuning DLP and SASE, SSE, or CASB solutions.* Cloud and SaaS Data: Deep understanding of how data is stored and accessed across major cloud platforms and SaaS applications.* AI Proficiency: Day-to-day use of AI tools to gain efficiency, plus an understanding of how to secure them.* Communication: Strong written and verbal communication skills.#### Nice to Have* Healthcare or other highly regulated industry experience.* Vulnerability management or bug bounty triage experience.* Asset inventory or CAASM implementation experience.* Scripting experience (Python, PowerShell, JavaScript, or similar).* Identity provider and SSO experience.* CISSP, GIAC, or similar certifications (not required).#### Why Lumenalta is an amazing place to work atAt Lumenalta, you can expect that you will:* Be 100% dedicated to one project at a time so that you can innovate and grow.* Be a part of a team of talented and friendly senior-level developers.* Work on projects that allow you to use leading tech.#### LocationThis is a fully remote position; however, candidates must be based in United States of America and align with the Pacific, Central, or Eastern, time zones to ensure effective collaboration with client and team schedules.#### Application DeadlineApplications will be accepted until **November 8th, 2026**. Candidates can expect feedback by **November 16th, 2026**.## Salary**Salary range:** $72k - $160k annually, with final compensation determined by your qualifications, expertise, experience, and the role's scope.## BenefitsIn addition to competitive pay, we offer a variety of benefits to support your professional and personal growth, including:* Flexible working hours in a remote environment.* Health insurance (medical and dental) for W2 Employees.* 401K Contribution.* A professional development fund to enhance your skills and knowledge.* 15 days of paid time off annually.* Access to soft-skill development courses to further your career.## Position DetailsThis is a full-time position requiring a minimum of **40 hours per week, Monday through Friday**.At **Lumenalta**, we are committed to creating an environment that prioritizes growth, work-life balance, and the diverse needs of our team members.