Data Security Engineer

Role: Senior Security Engineer

Location: Remote 

Key Responsibilities

· Design, implement, and operate Data Security Posture Management (DSPM) capabilities to continuously assess and improve the security posture of Aledade''s data assets, focusing on PII and PHI stored in cloud data platforms and SaaS systems.

· Build and maintain data discovery and scanning pipelines to identify sensitive data across databases, data lakes, SaaS applications, and storage systems.

· Develop and maintain data classification policies and controls to ensure consistent handling of PII, PHI, and other sensitive data, aligned with company policies and regulatory requirements.

· Partner with data platform teams (e.g., Postgres, Snowflake, Databricks) to implement and maintain robust access control models (RBAC/ABAC), including role definitions, least-privilege access patterns, and periodic access reviews.

· Support the creation and maintenance of data inventories, including asset catalogs, ownership, business context, and storage types, to enable visibility and governance over data assets.

· Implement monitoring and alerting for data access, movement, and policy violations, integrating with existing security tooling and incident response processes.

· Collaborate with Security and Legal on data security reviews, data sharing agreements, and legal holds to ensure data is preserved and managed appropriately.

· Partner with engineering and product teams to integrate data security requirements into system design, data architecture, and development lifecycles.

· Contribute to the development and documentation of data security policies, standards, and operating procedures.

· Provide guidance, training, and consultation to stakeholders on data security best practices and risk mitigation.

Qualifications

Required

· 5+ years of experience in Security Engineering, Data Engineering, or a related field, with at least 2+ years focused on data security, data governance, or DSPM.

· Experience with modern cloud data platforms (e.g., Postgres, Snowflake, Databricks, AWS S3) and data architectures (data warehouses, data lakes, lakehouses).

· Experience with data discovery, classification, and cataloging tools or frameworks.

· Understanding of protecting PII/PHI and regulatory requirements relevant to healthcare data (e.g., HIPAA) and data privacy.

· Proficiency in at least one scripting or programming language (e.g., Python) for automation and integration.

· Experience with regex patterns and scripting

· Strong collaboration and communication skills, with the ability to partner effectively with cross-functional teams.

Preferred

· Experience with Data Security Posture Management platforms or DSPM tooling (e.g., Wiz DSPM, BigID, Cyera, Bedrock Data, etc.)

· Experience integrating security controls into data pipelines and ETL/ELT workflows.

· Familiarity with legal hold processes, data retention, and lifecycle management.

· Experience working in healthcare, health tech, or other highly regulated environments.