Security Engineer (Data Engineering/ Protection)
Job Description
Technical expert role focused on enterprise data protection using Protegrity across applications and data pipelines.
Responsibilities
- Design, implement, and maintain enterprise data protection solutions using Protegrity, including tokenization, masking, and encryption controls
- Act as a technical expert for integrating Protegrity with new and existing applications, databases, and data pipelines across the organization
- Develop, test, and optimize data protection policies, workflows, and integration patterns to meet security and compliance requirements
- Troubleshoot and resolve complex issues involving Protegrity agents, connectors, policy enforcement, and application integration
- Partner with application teams, architects, and cybersecurity stakeholders to ensure secure data handling throughout solution lifecycles
- Maintain documentation for architectures, integration guides, runbooks, and operational procedures for data protection platforms
- Mentor and train junior engineers to build internal capability and sustain subject matter expertise
- Support ongoing operations and incident response activities for the organization’s Tier 1 data protection platform
Requirements
- Bachelor’s degree or equivalent education, training, and work-related experience
- Minimum 5 years of experience in security engineering or related cybersecurity roles
- Advanced knowledge of cybersecurity principles, theories, and concepts
- Proven experience applying software development lifecycle security practices
- Advanced knowledge of threat modeling, security testing, and penetration testing
- Experience implementing and managing complex information security technologies
Technologies
- Protegrity; tokenization; data masking; encryption
- Format-preserving tokenization (reversible and non-reversible); static and dynamic data masking
- Symmetric and asymmetric encryption; key management concepts
- Java, Python, .NET, SQL
- PCI DSS, GDPR, HIPAA
- AWS, Azure, GCP
- DevSecOps; CI/CD pipelines
- Snowflake; Hadoop ecosystem; Spark
Preferred Qualifications
- 5–8+ years in software engineering, cybersecurity engineering, or data engineering roles
- Hands-on experience integrating Protegrity or a similar enterprise data protection platform
- Strong knowledge of tokenization, including format-preserving, reversible, and non-reversible approaches
- Strong knowledge of data masking (static and dynamic)
- Strong knowledge of encryption (symmetric, asymmetric, and key management concepts)
- Experience with application integration patterns such as APIs, SDKs, agents, proxy-based controls, and microservices
- Proficiency in at least one modern programming language (Java, Python, .NET, etc.)
- Strong SQL and analytical skills
- Deep understanding of data security, IAM, and compliance frameworks (PCI DSS, GDPR, HIPAA, etc.)
- Ability to diagnose and resolve complex production issues in high-criticality environments
- Strong communication and cross-team collaboration abilities
- Experience working in cloud environments (AWS, Azure, GCP)
- Familiarity with DevSecOps practices and CI/CD pipelines
- Prior experience mentoring or leading junior engineers
- Background with big data platforms (Snowflake, Hadoop ecosystem, Spark) is a plus
Benefits
- Medical, dental, vision
- Life insurance
- Disability
- Accidental death and dismemberment
- Tax-preferred savings accounts
- 401k plan
- No less than 10 days of vacation (prorated based on date of hire and full-time or part-time status) during their first year of employment
- 10 sick days (prorated)
- Paid holidays
- Defined benefit pension plan (depending on position and division eligibility)
- Restricted stock units (depending on position and division eligibility)
- Deferred compensation plan (depending on position and division eligibility)
Job Details
- Location: Charlotte, NC (onsite)
- Employment type: Regular
- Language: English (Required)
- Work shift: 1st shift (United States of America)