Data Security Engineer

Data Security Engineer

Location: Vancouver or Seattle, Individual is expected to work onsite

Job Summary

The Data Security Engineer is responsible for designing, implementing, and maintaining data security solutions to protect our organization's sensitive information. The ideal candidate will have experience in data security, risk management, compliance, and technology best practices. The Data Security Engineer will work closely with the information security team, IT staff, and business stakeholders to identify and mitigate potential security risks and implement best practices. Creativity in tracking down possible gaps in data integrity and security for the enterprise would be an asset to the enterprise.

Must-have Requirements

• Analyze data protection risk scenarios within the data persistent and transit layers and develop mitigations to protect sensitive data with a sustainable solution.
• Strong expertise in cloud-native structured and unstructured storage products with the ability to dive deep into data activities, access controls, configurations, and audit logs in various cloud databases and unstructured storage platforms and develop a process and solutions to mitigate data risks.
• Proven experience in implementing and practicing cloud data security standards, compliance, and risk management strategies.
• Experience in evaluating Database (Oracle, PostgreSQL, MySQL, SQL server)/ Unstructured ( S3, Azure blob storage...) security tools in a cloud environment, preferably AWS.

Additional Responsibilities

• Analyze data protection risk scenarios within the data persistent and transit layers and develop mitigations to protect sensitive data with a sustainable solution.
• Keep up with the latest security threats, trends, and technologies, and provide recommendations for improvements.
• Collaborate with other teams to ensure secure system integration and compliance with security policies.
• Implement security measures to comply with industry standards and regulatory requirements (e.g. GDPR, HIPAA, PCI DSS, SOX).
• Responsible for securing and protecting sensitive data by implementing and maintaining security measures, policies, and procedure.
• Conduct security assessments and risk analyses to identify potential vulnerabilities and recommend remediation plans.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field
• 10+ years of experience in data security, risk management, or a related field
• In-depth knowledge of security technologies and best practices, such as encryption, access controls, and vulnerability assessment
• Familiarity with industry regulations and compliance requirements, such as HIPAA, PCI, SOX and GDPR
• Experience with security monitoring and incident response tools, such as SIEM and IDS/IPS
• Strong analytical and problem-solving skills
• Excellent communication and interpersonal skills
• Relevant certifications, such as CISSP or CISM, are a plus.
• Security specific certifications across AWS and Azure is a bonus.