Information Security Engineer

Required Experience: 7+ years in security engineering with hands-on implementation of DSPM, DLP, and SASE solutions. Own ePHI Discovery: Lead the technical discovery, classification, and inventory of ePHI across cloud, database, file share, and SaaS environments. Implement DSPM: Deploy and configure a Data Security Posture Management platform from end to end. Tune Data Protection: Mature existing DLP, CASB, and SASE controls, moving from monitoring to enforcement. Build Guardrails: Identify and apply policies for unsanctioned GenAI and shadow IT tools, especially those handling PHI.Integrate Tooling: Implement supporting tools like asset inventory and data classification to feed the system of record. Support Vulnerability Management: Validate findings from scanners, pen tests, and bug bounties, and route them for remediation. Back Up Incident Response: Support the established IR plan, investigating data exfiltration and insider-risk events. Document & Handoff: Create and maintain runbooks, configurations, and documentation for all implemented controls. Leverage AI: Use AI tools daily to improve efficiency and security outcomes.