Senior Data Security Engineer - Cloud & Data Governance

Root Inc.; United States; On-site; USD 112,000 - 139,000; Full time

Job summary

Root Inc. is seeking a Senior Security Engineer to lead our Data Security domain and shape how we protect data at scale. You will partner with Data Platform, Analytics, Engineering, and GRC teams to secure policyholder and corporate data across cloud-native environments.

You will establish standards for encryption, access controls, data masking, and secure data sharing while driving risk-based improvements and SOC 2 readiness across the organization.

Qualifications

• 5+ years of experience in data security, cloud security, security engineering, privacy engineering, or related field.
• Hands-on experience securing sensitive data in cloud environments and applying controls across storage, processing, analytics, and data-sharing systems.
• Experience embedding security requirements into data platforms, pipelines, analytics workflows, or application architectures.
• Familiarity with privacy, security, and regulatory requirements (HIPAA, GLBA, NYDFS, PCI DSS, NIST, etc.).

Responsibilities

• Define and execute the data security strategy and roadmap for policyholder, customer, employee, and corporate data.
• Protect PII and confidential data across its full data lifecycle.
• Define standards for data classification, encryption, key management, masking, tokenization, and secure data sharing.
• Design data access governance with least privilege, RBAC/ABAC, and periodic access reviews.
• Embed security controls into data pipelines, warehouses, data lakes, and AI workflows with partner teams.
• Improve visibility into sensitive data stores and data flows using DLP, monitoring, and audits.
• Establish secure backup, recovery, and resilience requirements for critical data.
• Translate regulatory and business requirements into practical controls and measurable risk reductions.
• Lead cross-functional prioritization balancing urgent remediation with long-term security maturity.
• Automate security workflows with scripting, policy-as-code, and approved AI-assisted tools.
• Develop playbooks, reference architectures, and reusable patterns to reduce overhead.
• Participate in on-call rotations and respond to security incidents during business hours and after hours as needed.
• Communicate data security risks and recommendations clearly to engineers and leadership.
• Coach teams on secure data handling and raise overall security maturity.

Skills

IAM

RBAC/ABAC

Encryption

KMS/HSM

Data classification

DLP

Data discovery

Access reviews

Tokenization

Masking

Retention & deletion

Backup security

Audit logging

AI-assisted tools

Job description

Root Inc. is seeking a Senior Security Engineer to lead our Data Security domain and shape how we protect data at scale. You will partner with Data Platform, Analytics, Engineering, and GRC teams to secure policyholder and corporate data across cloud-native environments.

You will establish standards for encryption, access controls, data masking, and secure data sharing while driving risk-based improvements and SOC 2 readiness across the organization.