Job Description
Information Security Engineer, Security Engineering & Data Protection
Own ePHI Discovery: Lead the technical discovery, classification, and inventory of ePHI across cloud, database, file share, and SaaS environments.
Implement DSPM: Deploy and configure a Data Security Posture Management platform from end to end.
Tune Data Protection: Mature existing DLP, CASB, and SASE controls, moving from monitoring to enforcement.
Build Guardrails: Identify and apply policies for unsanctioned GenAI and shadow IT tools, especially those handling PHI.
Integrate Tooling: Implement supporting tools like asset inventory and data classification to feed the system of record.
Support Vulnerability Management: Validate findings from scanners, pen tests, and bug bounties, and route them for remediation.
Back Up Incident Response: Support the established IR plan, investigating data exfiltration and insider-risk events.
Document & Handoff: Create and maintain runbooks, configurations, and documentation for all implemented controls.
Leverage AI: Use AI tools daily to improve efficiency and security outcomes.
Required Experience: 7+ years in security engineering with hands-on implementation of DSPM, DLP, and SASE solutions.