Sr Security Engineer

Information Security Engineer, Security Engineering & Data Protection

·       Own ePHI Discovery: Lead the technical discovery, classification, and inventory of ePHI across cloud, database, file share, and SaaS environments.

·       Implement DSPM: Deploy and configure a Data Security Posture Management platform from end to end.

·       Tune Data Protection: Mature existing DLP, CASB, and SASE controls, moving from monitoring to enforcement.

·       Build Guardrails: Identify and apply policies for unsanctioned GenAI and shadow IT tools, especially those handling PHI.

·       Integrate Tooling: Implement supporting tools like asset inventory and data classification to feed the system of record.

·       Support Vulnerability Management: Validate findings from scanners, pen tests, and bug bounties, and route them for remediation.

·       Back Up Incident Response: Support the established IR plan, investigating data exfiltration and insider-risk events.

·       Document & Handoff: Create and maintain runbooks, configurations, and documentation for all implemented controls.

·       Leverage AI: Use AI tools daily to improve efficiency and security outcomes.

·       Required Experience: 7+ years in security engineering with hands-on implementation of DSPM, DLP, and SASE solutions.