Job Description Data Security Engineer Location: Hybrid (Onsite/Remote) Type: Contract to hire Pay: $110,000-$120,000/yr W2 W2 ONLY, NO C2C Position Overview We are seeking an experienced Enterprise Data & Platform Security Engineer to lead the design, implementation, and continuous improvement of enterprise data protection and platform security capabilities. This is an engineering-focused role responsible for strengthening data security, improving governance, reducing organizational risk, and building scalable security solutions across cloud, infrastructure, identity, and enterprise platforms. The ideal candidate has a proactive engineering mindset and thrives on building security programs, automating processes, improving security posture, and driving long-term security strategy.
This is not a monitoring or SOC analyst role. Key Responsibilities Design and implement enterprise-scale data protection strategies across on-premises, cloud, SaaS, and hybrid environments. Develop security architectures supporting data classification, encryption, data loss prevention (DLP), tokenization, retention, and information protection.
Lead implementation and optimization of Microsoft Purview capabilities, including data discovery, classification, labeling, governance, and DLP. Improve enterprise visibility into sensitive data and develop remediation strategies to reduce organizational risk. Design secure architecture patterns for: Cloud platforms Kubernetes and containerized environments APIs Identity platforms Infrastructure-as-Code (IaC) CI/CD pipelines Lead complex investigations involving data exposure, insider risk, and security control failures while driving long-term remediation efforts.
Perform security assessments, threat analysis, architecture reviews, and vulnerability investigations across enterprise platforms. Develop security standards, governance frameworks, technical baselines, and operational playbooks. Create dashboards, metrics, and reporting to measure security posture, policy effectiveness, and risk reduction.
Partner with engineering, infrastructure, identity, application, privacy, and business teams to improve enterprise security maturity. Mentor junior security engineers and provide technical leadership across multiple initiatives. Drive automation, continuous improvement, and modernization of enterprise security capabilities.
Required Qualifications 7+ years of Information Security, Security Engineering, Cloud Security, or Platform Security experience. Strong experience designing and implementing enterprise data protection strategies. Hands-on experience with Microsoft Purview, including: Data Discovery Data Classification Data Labeling Data Loss Prevention (DLP) Information Protection Data Governance Experience securing cloud, hybrid, and enterprise infrastructure environments.
Strong understanding of: Identity and Access Management (IAM) Least Privilege Zero Trust principles Encryption Data Governance Experience securing Kubernetes, containers, APIs, cloud services, and CI/CD pipelines. Experience with SIEM, endpoint security, DLP, and enterprise security monitoring platforms. Strong understanding of security architecture, cloud security, networking, operating systems, and common enterprise threat vectors.
Experience investigating security incidents involving sensitive data and coordinating remediation efforts. Strong analytical, troubleshooting, documentation, and communication skills. Ability to prioritize multiple initiatives while working independently in a fast-paced environment.