Security Engineer – (Data Security Posture Management - DSPM)

Cognizant; Foster City (CA); On-site; USD 134,000 - 155,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Discretionary annual incentive program

Job summary

Cognizant is seeking a Data Security Posture Management Engineer to implement and operationalize enterprise DSPM across cloud and SaaS environments. You will focus on data visibility, discovery, classification, governance, and protection across AWS, Azure, M365, and cloud workloads, collaborating with Cloud DevOps, applications, and security teams.

The role requires hands‑on DSPM experience with platforms like Cyera, BigID, Varonis, Wiz, and Netskope DLP, plus strong knowledge of Kubernetes,

Qualifications

• 7+ years of experience in Data Security, Cloud Security, Security Engineering, or related cybersecurity domain.
• Hands‑on experience implementing or supporting DSPM solutions such as Cyera, BigID, Varonis, Wiz, Rubrik DSPM, Securiti.ai, or equivalent platforms.
• Strong experience with AWS services, including Amazon EKS, cloud storage, identity, and cloud‑native security integrations.
• Hands‑on experience with Microsoft Azure, Azure Kubernetes Service, Microsoft 365, and Microsoft Entra ID.
• Experience configuring Microsoft Purview policies for data classification, governance, labeling, and sensitive data protection.
• Experience administering Netskope DLP policies, data protection rules, and SaaS or cloud security integrations.
• Strong understanding of data discovery, classification, DLP, data governance, access controls, and sensitive data protection.
• Familiarity with Kubernetes, cloud‑native architectures, SaaS integrations, and IaC tools such as Terraform, CloudFormation, or Bicep.
• Knowledge of security and compliance frameworks such as NIST, ISO 27001, HIPAA, SOX, and GDPR.
• AWS/Azure/Microsoft Security CCSP certifications preferred.

Responsibilities

• Deploy, configure, maintain, and operationalize DSPM solutions across enterprise cloud, SaaS, and containerized environments.
• Integrate DSPM platforms with AWS, Azure, Microsoft 365, and supported SaaS applications and data repositories.
• Partner with Cloud DevOps teams and application owners to onboard data sources and workloads into the DSPM platform.
• Support DSPM integrations with AWS services and Kubernetes workloads running on Amazon EKS.
• Support data security integrations within Microsoft Azure, including workloads and applications running on Azure Kubernetes Service.
• Configure Microsoft Purview policies for data discovery, classification, labeling, governance, and sensitive information protection.
• Integrate DSPM capabilities with Microsoft Entra ID and Microsoft 365 to support identity‑aware data security controls.
• Implement and optimize Netskope DLP policies and integrations to protect sensitive data across cloud, endpoint, and SaaS environments.
• Troubleshoot integration, connectivity, classification, and policy enforcement issues across supported security platforms.
• Develop implementation documentation, architecture designs, operational runbooks, reports, and continuous improvement recommendations.

Skills

Data Security

Cloud Security

Security Engineering

Troubleshooting

Documentation

Stakeholder management

Communication

Tools

Cyera

BigID

Varonis

Wiz

Rubrik DSPM

Securiti.ai

Terraform

CloudFormation

Bicep

Job description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking a skilled Data Security Posture Management Engineer to implement, integrate, and operationalize enterprise DSPM capabilities across cloud and SaaS environments. This role will focus on improving data visibility, discovery, classification, governance, and protection across AWS, Azure, Microsoft 365, and cloud-native workloads. The ideal candidate will have hands‑on experience with DSPM platforms, Microsoft Purview, Netskope DLP, Kubernetes, and cloud security integrations. This position requires close collaboration with Cloud DevOps, application, compliance, and security teams to strengthen enterprise data protection.

*Please note, this role is not able to offer visa transfer or sponsorship now or in the future*

In this role, you will:

• Deploy, configure, maintain, and operationalize DSPM solutions across enterprise cloud, SaaS, and containerized environments.
• Integrate DSPM platforms with AWS, Azure, Microsoft 365, and supported SaaS applications and data repositories.
• Partner with Cloud DevOps teams and application owners to onboard data sources and workloads into the DSPM platform.
• Support DSPM integrations with AWS services and Kubernetes workloads running on Amazon EKS.
• Support data security integrations within Microsoft Azure, including workloads and applications running on Azure Kubernetes Service.
• Configure Microsoft Purview policies for data discovery, classification, labeling, governance, and sensitive information protection.
• Integrate DSPM capabilities with Microsoft Entra ID and Microsoft 365 to support identity‑aware data security controls.
• Implement and optimize Netskope DLP policies and integrations to protect sensitive data across cloud, endpoint, and SaaS environments.
• Troubleshoot integration, connectivity, classification, and policy enforcement issues across supported security platforms.
• Develop implementation documentation, architecture designs, operational runbooks, reports, and continuous improvement recommendations.

What you need to have to be considered

• 7+ years of experience in Data Security, Cloud Security, Security Engineering, or a related cybersecurity domain.
• Hands‑on experience implementing or supporting DSPM solutions such as Cyera, BigID, Varonis, Wiz, Rubrik DSPM, Securiti.ai, or equivalent platforms.
• Strong experience with AWS services, including Amazon EKS, cloud storage, identity, and cloud‑native security integrations.
• Hands‑on experience with Microsoft Azure, Azure Kubernetes Service, Microsoft 365, and Microsoft Entra ID.
• Experience configuring Microsoft Purview policies for data classification, governance, labeling, and sensitive data protection.
• Experience administering Netskope DLP policies, data protection rules, and SaaS or cloud security integrations.
• Strong understanding of data discovery, classification, DLP, data governance, access controls, and sensitive data protection.
• Familiarity with Kubernetes, cloud‑native architectures, SaaS integrations, and Infrastructure as Code tools such as Terraform, CloudFormation, or Bicep.
• Knowledge of security and compliance frameworks such as NIST, ISO 27001, HIPAA, SOX, and GDPR.
• Strong troubleshooting, analytical, documentation, communication, and stakeholder management skills; AWS, Azure, Microsoft Security, or CCSP certifications are preferred.

#LI-EF1

#CB

#Ind123

Applications will be accepted until 25 Sep 2026.

Salary and Other Compensation:

The annual salary for this position is between $[ 134,000 - 154,500] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan