Data Security Engineer

This is a fully remote position, open to applicants in Alabama, +31 more states.

📋 Description

• Implement, manage, and enhance security measures to protect institutional data throughout the enterprise data estate.

• Enforce data protection protocols, including classification and labeling, masking, tokenization, redaction, and de-identification.

• Configure and oversee encryption protocols for data both at rest and in transit, including certificate management, customer-managed keys, key rotation, and vaulting services.

• Administer keys, secrets, and credentials using approved vaulting solutions and managed identities.

• Enforce least-privilege access models across data platforms, databases, workspaces, schemas, tables, pipelines, and service identities.

• Conduct quarterly and periodic entitlement reviews to identify and rectify excessive or orphaned access.

• Strengthen Microsoft Fabric, Databricks, Azure SQL, SQL Server, data lakes, and storage services.

• Evaluate database permissions, schemas, stored procedures, queries, and audit configurations for security vulnerabilities.

• Integrate security measures into data ingestion, transformation, orchestration, sharing, and export workflows.

• Secure service identities, connectors, private endpoints, network routes, notebooks, jobs, and CI/CD processes.

• Safeguard non-production environments with synthetic data or controlled production data extracts, along with approved masking and tokenization.

• Automate the deployment of controls, configuration assessments, evidence collection, and compliance validations using scripting, Infrastructure as Code (IaC), and platform APIs.

• Integrate data security telemetry with Security Operations to facilitate investigations, containment, and corrective actions.

• Monitor control health metrics, analyze findings and exceptions, and recommend improvements.

• Assist with audits, risk assessments, and regulatory or contractual reviews by providing technical evidence.

• Develop implementation guides, configuration standards, control mappings, runbooks, and operational procedures.

• Engage in threat modeling, secure design reviews, proof-of-concept evaluations, technical risk assessments, peer reviews, and secure-by-design initiatives.

• Offer hands-on technical support to teams involved in designing, deploying, migrating, or troubleshooting data solutions.

• Report to the Deputy CISO.

• Maintain regular attendance, punctuality, and reliability.

⛳️ Requirements

• Bachelor's degree in information technology, computer science, information security, or a related field, or equivalent experience in place of a degree.

• Over 7 years of experience in information security, cloud engineering, database engineering, data engineering, or a related area.

• At least 2 years of focused experience in data protection or database security.

• Professional certifications are not mandatory.

• Understanding of the data protection lifecycle, including classification, encryption, key and secrets management, access and entitlement controls, monitoring, retention, and secure disposal.

• Familiarity with cloud data and analytics platforms and relational database systems, including Azure SQL and SQL Server.

• Knowledge of Azure identity, networking, storage, governance, and key management services.

• Awareness of relevant networking protocols and secure data-access pathways.

• Understanding of regulatory, contractual, and policy requirements such as FERPA, GLBA Safeguards Rule, PCI DSS, and applicable state breach notification laws.

• Proficient in SQL.

• Practical experience with implementing classification, labeling, masking, Data Loss Prevention (DLP), secure integration, monitoring, auditing, and logging controls.

• Experience in scripting and automation using platform APIs, infrastructure-as-code, or similar tools.

• Strong written and verbal communication skills with both technical and non-technical audiences.

• Must reside in and work from one of SNHU's approved states.

• Reliable internet connection and a dedicated, well-equipped workspace free from distractions.

🏝️ Benefits

• High-quality, low-deductible medical insurance.

• Low to no-cost dental and vision plans.

• 5 weeks of paid time off.

• Nearly a dozen paid holidays.

• Employer-funded retirement plan.

• Free tuition program.

• Parental leave.

• Mental health and wellbeing resources.