Senior InfoSec Engineer - DSPM, DLP, SASE & PHI Guardrails

TekValue IT Solutions; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

TekValue IT Solutions is seeking a senior security engineer to lead the implementation of DSPM, DLP, and SASE controls across cloud, on-prem, and SaaS environments. You will own ePHI discovery, classification, and inventory, and drive enforcement of data protection policies while maturing the incident response program.

The role requires hands-on experience with DSPM, DLP, CASB, and PHI handling, plus collaboration with vulnerability management and runbook documentation teams.

Qualifications

• 7+ years in security engineering with hands-on DSPM, DLP, and SASE
• Experience leading ePHI discovery across cloud, database, file shares and SaaS
• Ability to implement protection controls and runbooks across environments

Responsibilities

• Lead discovery, classification, and inventory of ePHI across cloud, database, file shares, and SaaS
• Deploy and configure a DSPM platform end-to-end
• Tune DLP, CASB, and SASE controls from monitoring to enforcement
• Build guardrails by applying policies for unsanctioned GenAI and shadow IT tools handling PHI
• Integrate asset inventory and data classification to feed the system of record
• Support vulnerability management by validating findings and routing for remediation
• Back up incident response: assist IR plan, investigate data exfiltration and insider-risk events
• Document and handoff: create and maintain runbooks, configurations, and documentation
• Leverage AI daily to improve security outcomes

Skills

Security engineering

DSPM

DLP

SASE

ePHI discovery

Policy enforcement

IR collaboration

Job description

TekValue IT Solutions is seeking a senior security engineer to lead the implementation of DSPM, DLP, and SASE controls across cloud, on-prem, and SaaS environments. You will own ePHI discovery, classification, and inventory, and drive enforcement of data protection policies while maturing the incident response program.

The role requires hands-on experience with DSPM, DLP, CASB, and PHI handling, plus collaboration with vulnerability management and runbook documentation teams.