Information Security Engineer, Security Engineering & Data Protection
· Own ePHI Discovery: Lead the technical discovery, classification, and inventory of ePHI across cloud, database, file share, and SaaS environments.
· Implement DSPM: Deploy and configure a Data Security Posture Management platform from end to end.
· Tune Data Protection: Mature existing DLP, CASB, and SASE controls, moving from monitoring to enforcement.
· Build Guardrails: Identify and apply policies for unsanctioned GenAI and shadow IT tools, especially those handling PHI.
· Integrate Tooling: Implement supporting tools like asset inventory and data classification to feed the system of record.
· Support Vulnerability Management: Validate findings from scanners, pen tests, and bug bounties, and route them for remediation.
· Back Up Incident Response: Support the established IR plan, investigating data exfiltration and insider-risk events.
· Document & Handoff: Create and maintain runbooks, configurations, and documentation for all implemented controls.
· Leverage AI: Use AI tools daily to improve efficiency and security outcomes.
· Required Experience: 7+ years in security engineering with hands-on implementation of DSPM, DLP, and SASE solutions.
