Information Security Engineer and Data Protection

Lumenalta; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Lumenalta is seeking an experienced Information Security Engineer to lead ePHI discovery, build an accurate data inventory, and implement a DSPM platform across cloud and SaaS environments.

You will mature DLP and SASE controls, enable responsible use of AI, and support vulnerability remediation and incident response while coordinating with GRC and security operations.

Qualifications

• 7+ years in security engineering with end-to-end tool deployment.
• Experience with DSPM, data discovery or data classification platforms.
• Hands-on DLP and SASE implementation and tuning.
• Cloud and SaaS data storage and access knowledge.
• Ability to use AI tools daily and secure them.
• Strong written and verbal communication.

Responsibilities

• Lead ePHI discovery and inventory across cloud storage, databases, file shares, and SaaS apps.
• Implement a DSPM platform end-to-end and tune classifiers to fix exposures.
• Integrate asset inventory and data classification results with the system of record.
• Mature DLP and SASE controls and reduce false positives/negatives.
• Establish GenAI guardrails and enforce sanctioned tools.
• Support vulnerability remediation lifecycle and incident response.

Skills

Security engineering

DSPM

DLP & SASE

Cloud & SaaS data

AI tooling usage

Communication

Tools

DSPM

DLP

CASB/SASE

Job description

About the Role

We are seeking an experienced, highly technical Information Security Engineer with a proven track record of implementing data protection tools end to end. In this role, you will lead ePHI discovery and inventory work from deployment through day-to-day operation, working from a defined strategy set by security leadership. You will implement a data security posture management (DSPM) platform and related tooling, mature existing DLP and SASE controls, and build an accurate, well-maintained inventory of where ePHI lives across cloud and SaaS environments. You will also support vulnerability remediation and back up incident response. The ideal candidate is hands-on, communicates clearly, and uses AI to work more efficiently.

What You'll Be Doing

• Own ePHI discovery and inventory, finding, classifying, and inventorying ePHI across cloud storage, databases, file shares, and SaaS applications, and keeping that inventory accurate as systems change.
• Implement a DSPM platform end to end, connecting data sources, tuning classifiers, identifying sensitive data that is over-exposed, unencrypted, or broadly accessible, and partnering with system owners to right-size access and fix misconfigurations.
• Integrate supporting tooling such as asset inventory and data classification so discovery results feed the system of record, documenting configurations and runbooks along the way.
• Mature DLP and SASE controls across the secure web gateway, CASB, DLP, and zero-trust stack by tuning policies to reduce false positives and negatives, strengthening enforcement, and building repeatable response processes for PHI movement events.
• Establish GenAI and shadow IT guardrails by identifying unsanctioned AI and SaaS tools and applying policies that enable safe use while blocking what should not be allowed.
• Support the vulnerability remediation lifecycle by monitoring critical public vulnerabilities, validating bug bounty, pen test, and scanner findings, routing them to the right teams, and confirming fixes.
• Back up incident response using the established plan when the primary responder is unavailable, and investigate data exfiltration and insider risk events surfaced by data protection controls.
• Partner with GRC by handing technical control gaps to the GRC analyst for tracking.
• Support security operations including security tooling administration, TLS inspection exceptions, and technical off-boarding.

What We’re Looking For

• Experience: 7+ years in security engineering, with a proven track record of implementing security tools end to end, not only operating them.
• Data Security Platforms: Hands-on implementation experience with DSPM, data discovery, or data classification platforms.
• DLP and SASE: Hands-on experience implementing and tuning DLP and SASE, SSE, or CASB solutions.
• Cloud and SaaS Data: Deep understanding of how data is stored and accessed across major cloud platforms and SaaS applications.
• AI Proficiency: Day-to-day use of AI tools to gain efficiency, plus an understanding of how to secure them.
• Communication: Strong written and verbal communication skills.

Nice to Have

• Healthcare or other highly regulated industry experience.
• Vulnerability management or bug bounty triage experience.
• Asset inventory or CAASM implementation experience.Scripting experience (Python, PowerShell, JavaScript, or similar).
• Identity provider and SSO experience.
• CISSP, GIAC, or similar certifications (not required).

Why Lumenalta is an amazing place to work at

• Be 100% dedicated to one project at a time so that you can innovate and grow.
• Be a part of a team of talented and friendly senior-level developers.
• Work on projects that allow you to use leading tech.

Location

This is a fully remote position; however, candidates must be based in United States of America and align with the Pacific, Central, or Eastern, time zones to ensure effective collaboration with client and team schedules.

Application Deadline

Applications will be accepted until October 25, 2026. Candidates can expect feedback by November 2nd, 2026.