Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop the strategy and roadmap for data security concerning sensitive policyholder, customer, employee, and corporate information.

• Safeguard PII, financial records, health-related data, claims information, and other regulated or confidential data throughout its lifecycle.

• Set standards for data classification, encryption, key management, masking, tokenization, anonymization, pseudonymization, retention, deletion, and secure data sharing.

• Design and enhance data access governance, including least privilege, RBAC/ABAC, privileged access, row-level controls, column-level controls, and routine access reviews.

• Collaborate with Data Platform and Analytics teams to integrate security controls into data pipelines, warehouses, data lakes, reporting platforms, and machine learning workflows.

• Enhance visibility into sensitive data repositories, data flows, third-party transfers, and access patterns through discovery, monitoring, DLP, and associated security tools.

• Define secure backup, recovery, and resilience standards for critical data.

• Convert regulatory and business requirements into actionable technical controls and measurable risk-reduction initiatives.

• Lead cross-functional prioritization efforts and assist in SOC 2 readiness.

• Automate security workflows utilizing scripting, APIs, policy-as-code, and authorized AI-assisted tools.

• Create playbooks, reference architectures, and reusable frameworks.

• Engage in the Security Engineering on-call rotation, managing alerts and addressing after-hours escalations as required.

• Convey data security risks, decisions, and recommendations to engineers, business stakeholders, and senior leadership.

• Mentor engineering and analytics teams on secure data management practices and enhance the organization's data security maturity.

⛳️ Requirements

• Over 5 years of experience in data security, cloud security, security engineering, privacy engineering, or a related technical discipline.

• Practical experience in securing sensitive data within cloud environments across storage, processing, analytics, and data-sharing systems.

• Proficiency in several areas including IAM, RBAC/ABAC, encryption, KMS/HSM, data classification, DLP, data discovery, access reviews, tokenization, masking, retention, deletion, backup security, and audit logging.

• Experience in integrating security requirements into data platforms, data pipelines, analytics workflows, or application architectures.

• Collaboration experience with engineering, data platform, analytics, infrastructure, Security Operations, Privacy, Legal, or GRC teams.

• Proven track record of enhancing security operations through automation, scripting, integrations, policy-as-code, or systematic process improvements.

• Understanding of privacy, security, and regulatory requirements such as HIPAA, GLBA, state privacy laws, NYDFS, PCI DSS, NIST, or similar frameworks.

• Excellent communication skills with the ability to articulate technical risks and tradeoffs to engineers and senior leadership.

• Capability to balance security requirements with business needs and foster stakeholder alignment.

• Sound judgment when utilizing approved AI-assisted tools with confidential, proprietary, or regulated information.

• Preferred: experience in insurance, financial services, healthcare, or another regulated sector.

• Preferred: familiarity with data security posture management, data activity monitoring, enterprise DLP, or cloud data security platforms.

• Preferred: knowledge of major cloud providers and cloud-native data services.

• Preferred: experience with infrastructure-as-code, CI/CD security, policy-as-code, or security automation.

• Preferred: experience supporting SOC 2, HIPAA, GLBA, NYDFS, PCI DSS, ISO 27001, or similar compliance frameworks.

• Preferred: familiarity with AI-assisted engineering tools such as GitHub Copilot, Claude, Codex, or equivalent platforms.

• Candidates are required to be on camera for virtual interviews.

🏝️ Benefits

• Eligible for a competitive bonus.

• Equity offering.

• Flexible location/work arrangements available across the US.

• Reasonable accommodations provided throughout the hiring process.