Data Security Engineer IV

Edward Jones Data Security Engineer

Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns.

Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging.

People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career.

Team Overview:

At Edward Jones, our Data Security team is developing controls, requirements and patterns that empowers the firm to innovate securely by embedding resilient, regulation-aligned security practices across all data environments, and fostering a culture where confidentiality, integrity, and availability of data are foundational to business success. In a Security Engineering role you will be expected to design secure systems, integrations, and architectures as well as build deployment patterns. This is an exceptional challenge and opportunity for someone who is excited for rapid change and continuous learning.

What you'll do:

• Define and maintain security standards and guardrails, including gold standards, reference configurations, templates, and advises on architectural patterns.
• Provides security guidance and contributes to designs, reviewing solutions, identifying gaps and compensating controls, influencing strategy, and escalating high-risk designs as needed.
• Translate and extend enterprise data security controls and classification frameworks from unstructured to structured data platforms, ensuring consistent protection across databases, warehouses, and analytics environments.
• Drive validation and adoption of controls, including documentation of behavior and integrations, proof-of-concepts or pilots, and support for remediation of security and compliance gaps.

What Experience You'll Need:

• 7+ years of experience in data security, cybersecurity engineering, or cloud security roles.
• Hands-on experience in data security engineering within a financial services environment (preferred).
• Experience supporting audits, risk assessments, and regulatory examinations.
• Understanding of identity-centric and behavior-based security models, including Zero Trust principles, identity-aware data access, privileged-user monitoring, insider-threat detection, UEBA, anomaly detection, and SIEM / SOAR integrations.
• Hands-on experience designing, implementing, and operating data security controls across structured data environments, including Database Activity Monitoring ( DBAM ), data discovery and inventory, data access governance, CASB, DLP, and DSPM capabilities.
• Strong expertise in data protection mechanisms such as encryption (at rest, in transit, and field-level), tokenization, masking, anonymization, row-level security, and sensitive data classification, labeling, and label propagation.
• Experience securing modern data platforms and pipelines, including relational and cloud-native databases, data warehouses/lakehouses, and structured ETL / ELT workflows, ensuring protection of data-at-rest and data-in-motion across on-prem, cloud, and hybrid environments.
• Ability to drive enterprise wide projects that extend Zero Trust and identity-aware access principles to data, integrating IAM controls, privileged user monitoring, and policy enforcement with SIEM / SOAR workflows.
• Ability to drive enterprise-scale adoption of data security controls and policies, including extending governance frameworks to emerging use cases such as machine learning and large language model (AI) systems
• Familiarity with GLBA, SOX, FFIEC, and NYDFS 500 regulatory requirements.
• Knowledge of NIST SP 800-53 and the NIST Cybersecurity Framework ( CSF ).
• Ability to communicate complex technical concepts and risks to non-technical stakeholders, translating technical issues into clear business impacts.
• Ability to partner with adjacent security domains (e.g., unstructured data security, DLP, DSPM ) to ensure consistent policy application and to translate control requirements across data types and environments.

Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.

At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received.

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.