Staff Engineer - Cybersecurity (Data Security & Privacy)

• Lead the organization's data protection and cybersecurity initiatives to safeguard sensitive data and information systems
• Identify, assess, and mitigate data risks, vulnerabilities, and threats
• Design and implement enterprise-scale data security strategies and controls
• Act as a technical expert and mentor, driving best practices across the data protection function, * Define and implement data protection strategies: classification, access control, encryption, retention, and data handling
• Develop and enforce data security policies, standards, and procedures across the organization
• Build and maintain data inventories, data flows, and data sharing controls
• Design and implement data access controls ensuring least-privilege access
• Establish and enforce data encryption standards (data at rest and in transit)
• Define and manage data retention policies aligned with regulatory requirements
• Conduct data risk assessments to identify vulnerabilities and recommend mitigation strategies
• Lead incident response for data breaches and coordinate remediation efforts
• Collaborate with stakeholders to ensure compliance with regulatory and security requirements
• Stay updated with industry trends, threats, and best practices in cybersecurity
• Mentor and guide data protection engineers, including reviewing and approving deliverables
• Represent the organization in client and stakeholder engagements

• Strong experience in data discovery, classification, access control, inventory, and retention in cloud environments (AWS preferred)
• Hands-on experience with data protection technologies: encryption, tokenization, DLP tools
• Experience designing and implementing enterprise data security solutions
• Strong understanding of data security frameworks, standards, and protocols
• Knowledge of data privacy regulations (e.g., NYDFS, PCI, etc.)
• Experience with cloud platforms (AWS/Azure/Google Cloud Platform)
• Proficiency in at least one programming language (Python, Java, or .NET)
• Strong analytical, problem-solving, and risk assessment skills
• Excellent communication and stakeholder management skills

Good-to-Have Skills

• Experience with open-source security frameworks/tools
• Exposure to multi-cloud security architectures
• Experience working in fast-paced, high-growth environments
• Prior experience in team leadership and mentoring