Data Security Engineer

Role Summary Supports PHI discovery, classification validation, repository analysis, evidence collection, data mapping, governance documentation, and operational-readiness activities. Provides hands-on execution under the direction of the Data Security Architect and produces traceable, reviewable work products. Required Experience 4-8 years of data security, information protection, DLP, or data governance experience Experience supporting data discovery or classification initiatives Experience analyzing enterprise data repositories and evidence Experience supporting governance, privacy, or compliance stakeholders Experience documenting technical findings and data inventories Core Technical Competencies Data discovery Data classification validation DLP operations and analysis Repository and metadata analysis Information protection Evidence collection and reconciliation Data-flow mapping support Data governance documentation Required Hard Skills Microsoft Purview Data classification and label validation Structured data collection using Excel or comparable analysis tools File-share, repository, application, report, backup, and non-production inventory analysis DLP alert, policy, and finding analysis Evidence indexing, gap tracking, and exception documentation Coverage and confidence reporting Operational procedure and knowledge-transfer documentation Preferred Hard Skills (Plusses):Prisma DLP Mimecast policy or encryption analysis Power BI reporting SQL and basic data querying AWS repository or storage analysis Metadata, lineage, or data-mapping tools Scripting or automation for repeatable analysis Preferred Certifications CompTIA Security+ Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400) HCISPP Relevant Microsoft Purview or data governance credentials Ideal Candidate Profile:A technically strong data-security practitioner who can execute discovery exercises, validate classification findings, build defensible inventories, map evidence, identify coverage limitations, and support operational handoff in a healthcare environment