Senior Data Security Engineer

247Hire; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

247Hire seeks a Senior Data Security Engineer to build and operationalize a Data Security Posture Management capability across on-premises, cloud, SaaS, and hybrid environments. You will partner with engineering teams to design, develop, implement, and operate solutions that protect sensitive data, reduce risk, improve visibility, and support governance, monitoring, and remediation workflows.

The role requires deep data security expertise, strong Python development skills, and a track record of

Qualifications

• 7+ years in cybersecurity, data security, or cloud security.
• Strong understanding of Data Security Posture Management concepts and data-centric security.
• Experience with structured and unstructured data environments and modern data architectures.
• Strong Python development skills and API integration experience.
• Experience integrating enterprise platforms via APIs, event-driven architectures, queues, or streaming tech.
• Knowledge of IAM, encryption, logging, secrets management, and network security.
• Experience with Linux, Git, CI/CD, automated testing, containers, and infra automation.
• Understanding data classification, privacy, regulatory obligations, risk-based controls.
• Ability to create technical designs, procedures, metrics, and risk communications.
• Understanding secure and governed AI practices.

Responsibilities

• Engineer and operate Data Security Posture Management capabilities to discover, inventory, classify, assess, monitor, and protect data.
• Onboard data sources across databases, warehouses, lakes, stores, SaaS apps, and cloud services.
• Design secure integrations between DSPM platforms and enterprise services.
• Develop Python services and automation for onboarding, enrichment, scan orchestration, remediation.
• Correlate data signals to identify material data risks.
• Configure discovery, classification, analytics, dashboards, and workflows.
• Implement least privilege, Zero Trust, encryption, masking, and labeling.
• Translate findings into remediation actions and track risks and ownership.
• Support security architecture reviews with deployment footprints, data flows, and control evidence.
• Build observability for platform availability and integration reliability.
• Participate in design/code reviews and Agile ceremonies.
• Collaborate with governance, privacy, compliance, security operations, and data owners.
• Work with peers to establish reusable patterns and resolve risks.

Skills

Python development

Data security

Cloud security

Linux

CI/CD

Troubleshooting

Zero Trust

IAM basics

Tools

Azure

AWS

GCP

MongoDB

SQL data warehouses

Data lakes

Kubernetes

Docker

Terraform

Ansible

Kafka

Jenkins

Grafana

Splunk

Job description

The Senior Data Security Engineer will help build and operationalize a Data Security Posture Management capability across on premises, cloud, Software as a Service, and hybrid environments. This role will partner with engineering teams to design, develop, implement, and operate solutions that protect sensitive data, reduce risk, improve visibility, and support governance, monitoring, and remediation workflows.

Responsibilities

• Engineer and operate Data Security Posture Management capabilities that continuously discover, inventory, classify, assess, monitor, and protect sensitive data across structured and unstructured data stores.
• Onboard data sources across databases, data warehouses, data lakes, object stores, file platforms, Software as a Service applications, and cloud services through connectors, scanners, application programming interfaces, and customer side components.
• Design and build secure integrations between Data Security Posture Management platforms and enterprise services, including data catalogs, identity and access management, configuration management, security monitoring, incident response, ticketing, reporting, and downstream control systems.
• Develop Python services, scripts, and automation for source onboarding, metadata enrichment, scan orchestration, evidence capture, finding normalization, risk scoring, workflow integration, and remediation.
• Correlate data sensitivity, ownership, location, lineage, permissions, identity context, configuration, exposure, and activity signals to identify and prioritize material data risks.
• Configure and tune discovery, classification, policies, analytics, alerting, dashboards, and workflows while measuring classifier quality, coverage, false positives, and control effectiveness.
• Implement and validate least privilege, Zero Trust, encryption, masking, tokenization, labeling, retention, and other data protection controls with platform teams.
• Translate findings into remediation actions, automate response patterns, and track risks, exceptions, ownership, evidence, and closure.
• Support security architecture reviews by documenting deployment footprints, data flows, trust boundaries, access models, encryption, logging, software components, and control evidence.
• Build observability for platform availability, connector health, scan performance, data freshness, coverage, finding quality, and integration reliability.
• Participate in design reviews, code reviews, testing, release management, Agile ceremonies, operational readiness activities, documentation, and knowledge sharing.
• Partner with governance, privacy, compliance, security operations, application, cloud, and data owners to convert technical insights into business relevant risk improvements.
• Collaborate with peer engineers to establish reusable patterns, review designs and code, and resolve technical risks and dependencies.

Qualifications

Required Qualifications

• Seven or more years of experience in cybersecurity, data security, security engineering, data engineering, cloud security, or a related field.
• Strong understanding of Data Security Posture Management concepts and data centric security practices.
• Experience with structured and unstructured data environments and modern data architectures.
• Strong Python development skills and application programming interface integration experience.
• Experience integrating enterprise platforms using application programming interfaces, event driven architectures, queues, or streaming technologies.
• Knowledge of identity and access management, least privilege, encryption, logging, secrets management, and network security.
• Experience with Linux, Git, continuous integration and continuous delivery, automated testing, containers, and infrastructure automation.
• Strong troubleshooting skills across applications, operating systems, networks, cloud services, identities, and data sources.
• Understanding of data classification methodologies, privacy requirements, regulatory obligations, and risk based controls.
• Ability to create technical designs, operational procedures, metrics, and risk communications for technical and business audiences.
• Understanding of secure and governed artificial intelligence practices throughout the technology lifecycle.

Preferred Qualifications

• Experience with Data Security Posture Management, data discovery, data classification, data catalog, data loss prevention, insider risk, or data access governance solutions.
• Experience with Microsoft Purview, BigID, Varonis, Cyera, Securiti, or similar technologies.
• Experience with Azure, Amazon Web Services, Google Cloud, MongoDB, relational databases, data warehouses, data lakes, or lakehouse platforms.
• Experience with Kubernetes, Docker, Terraform, Ansible, Kafka, Jenkins, Flux, Grafana, Loki, or Splunk.
• Knowledge of security monitoring, automation and response platforms, configuration management databases, data lineage, identity and access management, cryptography, masking, retention, and secure deletion solutions.
• Familiarity with NIST guidance, Zero Trust principles, cloud security baselines, and security frameworks used in regulated environments.
• Experience supporting security reviews, proof of concept initiatives, technology onboarding efforts, or production readiness assessments.

Skills and Requirements – add details here