Data Security Engineer

Protect member, vendor, and employee data by operating DSPM, driving remediation, and strengthening privacy and data protection across on-premises, cloud, and SaaS.

Responsibilities

• Collaborate with technology, data, and analytics teams to embed data protection and privacy-by-design into new systems, data pipelines, and products
• Run and tune a DSPM platform to discover and classify sensitive data across cloud, SaaS, and on-premises environments (PII, payment card data, health information, confidential business data)
• Lead remediation for overexposed, misclassified, and abandoned datasets, including data exposed to AI tools and assistants
• Support selection, deployment, and tuning of DLP controls across endpoint, email, web, and SaaS channels, using data classification to drive policy
• Partner with infrastructure and the Security Architect to improve encryption, tokenization, masking, and key management for data at rest and in transit
• Maintain least-privilege access to sensitive data and secure cloud data platforms through access reviews, guardrails, and remediation
• Triage data detection and response alerts and build alerting for anomalous data access and exfiltration with the Security Operations Center
• Support incident response for data exposure as a responder, subject matter expert, and/or liaison to technology, legal, and business teams
• Create data security standards, procedures, runbooks, and automations; support compliance efforts (including PCI DSS and HIPAA where applicable) and share data security knowledge with Security Analysts

Requirements

• Bachelor’s Degree in Computer Science, Information Security, or related field (or an equivalent combination of education and experience)
• 3+ years of experience in cybersecurity or a similar role, with at least 2 years focused on data security or data protection
• Strong understanding of modern data security concepts and privacy-by-design principles
• Deep knowledge of one or more security and privacy frameworks, such as NIST CSF, NIST Privacy Framework, and CIS
• Hands-on experience with at least two of the following: DSPM, data classification, DLP, data access governance tools
• Working knowledge of encryption, tokenization, and key management (including PKI and cloud KMS)
• Experience securing data in public cloud, cloud data warehouse, and SaaS productivity environments
• Familiarity with PCI DSS, HIPAA, and U.S. state privacy laws (for example, CCPA/CPRA)
• Knowledge of SIEM and logging platforms, plus SQL and scripting in Python, PowerShell, or similar
• Excellent customer service, communication, and documentation skills

Technologies

• DSPM
• Data classification
• DLP
• Data access governance tools
• Encryption, tokenization, masking
• Key management (PKI, cloud KMS)
• SIEM and logging platforms
• SQL
• Python, PowerShell
• PCI DSS
• HIPAA
• CCPA/CPRA
• NIST CSF
• NIST Privacy Framework
• CIS

Benefits

• A fully subsidized membership
• Discounts on Life Time products and services
• 401(k) retirement savings plan with company discretionary match (21 years of age and older)
• Training and professional development
• Paid sick leave where required by law
• Medical, dental, vision, and prescription drug coverage
• Short term and long term disability insurance
• Life insurance
• Pre-tax flexible spending and dependent care plans
• Parental leave and adoption assistance
• Paid time off, including 5 to 20 vacation days per calendar year (based on tenure) and paid sick leave
• Deferred compensation plan, if the team member meets the required income threshold

Pay

Salaried position starting at $94,000.00 (or applicable minimum salary, if higher) and pays up to $129,000.00, based on experience and qualifications.

Location: Chanhassen, MN (onsite)