Information Security Engineer - Data Protection

Key Responsibilities

• Lead structured data protection initiatives across on-prem and cloud databases (SQL, Oracle, PostgreSQL, MySQL, NoSQL).
• Implement and maintain Data Security Platforms (DSP) , Database Activity Monitoring (DAM) , and DLP controls.
• Design encryption, tokenization, and masking strategies to secure PII, PCI, PHI and other regulated datasets.
• Conduct data classification and discovery to identify sensitive information and ensure proper handling.
• Monitor and respond to database-related security alerts, incidents, and vulnerabilities.
• Ensure compliance with industry standards such as GDPR, HIPAA, PCI-DSS, SOX, ISO 27001 etc.
• Collaborate with DevOps and DB teams to integrate security controls into data lifecycle workflows.
• Perform secure configuration reviews, vulnerability assessments, access control audits, and risk assessments.
• Automate data protection processes using scripting (Python, PowerShell, Bash).
• Create policies, technical documentation, runbooks, and provide security guidance to stakeholders.

Technical Skills Required