security engineer for financial and payment data

HireHi; United States; Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Relocation support to company hubs

Flexible work from offices or remote

Healthcare coverage

Education budget

Wellness budget

20 Days annual leave

Job summary

HireHi ищет специалиста по защите данных для внедрения и эксплуатации DLP, защиты конфиденциальной информации и соблюдения требований регуляторов.

Ключевые задачи включают настройку политик, интеграцию с SIEM и Jira, тестирование контролй и участие в аудитах. Предлагается гибридный формат работы, возможна удаленная работа, с релокацией в офисы компании и компенсационными пакетами.

Qualifications

• 1+ года опыта в информационной безопасности, IP-защите данных, DLP или смежной роли.
• Умение настраивать и тестировать политики безопасности и правила обнаружения.
• Знание типа данных, потоков данных и сценариев утечки информации.

Responsibilities

• Развертывание, настройка и эксплуатация DLP на концах, в облаке, электронной почте и хранилищах.
• Создание и поддержка политик классификации и маркировки данных.
• Интеграция инструментов защиты с SIEM, Jira, облачными сервисами и автоматизацией.
• Поиск и устранение случаев утечки совместно с SOC, Legal, Privacy, HR и бизнес-единицами.
• Мониторинг, настройка дашбордов и управление инцидентами.

Skills

Python/Automation

Troubleshooting

Collaboration

English (B1+)

Tools

Elastic Stack

SIEM

Jira

Cloud security

Job description

Описание:

The Technical Data Protection function implements and operates technical controls to protect sensitive, confidential, personal, financial, and payment data.

Задачи:

Implement, configure, and operate DLP controls across endpoints, cloud services, email, collaboration platforms, and data storage environments Create and maintain DLP policies for personal, financial, payment, confidential, and other sensitive data Integrate data classification and labelling with technical enforcement and monitoring controls Develop detection logic based on data types, labels, content patterns, context, user behaviour, destinations, and business processes Investigate DLP alerts and potential data leakage cases with SOC, Legal, Privacy, HR, and relevant business teams Tune policies to reduce false positives while maintaining effective protection and monitoring coverage Implement data discovery and scanning processes to identify sensitive data across corporate environments Support the implementation of encryption, masking, tokenisation, access controls, and other technical data protection mechanisms Collect DLP and data security events in SIEM and create monitoring dashboards, alerts, and operational metrics Integrate data protection tools with SIEM, Jira, identity platforms, cloud services, and automation workflows Automate repetitive operational tasks, policy deployment, evidence collection, reporting, and incident enrichment Test data protection controls and validate policies before production rollout Maintain technical documentation, operating procedures, implementation guides, and response playbooks Support onboarding new systems, repositories, data sources, and business processes into the data protection framework Identify control gaps and propose technical improvements based on incidents, testing results, and monitoring data Support audits and regulatory assessments by providing technical evidence of implemented data protection controls

Требования:

1+ Years of experience in Information Security, Security Engineering, Data Security, DLP, or a related technical role Practical experience implementing or operating DLP, data classification, data discovery, or cloud security controls Understanding of sensitive data types, data flows, data handling risks, and common data leakage scenarios Experience creating, testing, and tuning security policies and detection rules Understanding of encryption, masking, tokenisation, access control, and secrets protection Experience analysing security events, investigating alerts, and documenting findings Familiarity with cloud services, enterprise collaboration platforms, and modern data environments Basic scripting or automation skills using Python, Bash, APIs, or workflow automation tools Strong troubleshooting skills, attention to detail, and a structured approach to technical implementation Ability to collaborate with technical and non-technical teams English B1+ for working with documentation, tools, and international teams Будет плюсом: Experience with Google Workspace DLP, endpoint DLP, CASB, or similar security technologies; experience with data discovery and classification across cloud storage, databases, or DWH platforms; familiarity with Elastic Stack or another SIEM platform; experience with AWS, Snowflake, PostgreSQL, or Kubernetes; understanding of PCI DSS, privacy regulations, and financial data protection requirements; experience integrating security products through APIs; experience building dashboards, reports, or automated security workflows; relevant security, cloud, or data protection certifications

Условия:

Relocation support to one of the company’s hubs — Cyprus, Serbia, Georgia or Kazakhstan — with assistance for the employee and their family Flexible work from one of the company’s offices or remote Healthcare coverage Education budget for language lessons, professional training, and certifications Wellness budget for mental health and fitness activity reimbursements 20 Days of annual leave and paid sick leave