{"id":1761577,"url":"https://alion.io/job/first-student-data-protection-engineer","title":"Data Protection Engineer","company":{"id":1861742,"name":"First Student","domain":"firststudentinc.com","url":"https://alion.io/company/firststudentinc-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Data Science","role_family":"Data Science","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cincinnati, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130000,"max":155000,"currency":"USD","period":"year","gross":null,"usd_annual":155000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-07-17T00:00:00Z","employer_posted_date":"2026-07-17","last_verified_at":"2026-10-07T00:50:38Z","board_verified":true,"closed_at":null,"days_open":82,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":82},"description":"The Data Protection & Security Engineer will serve as the primary owner of First Student’s data protection capability while also providing hands-on security engineering support across cloud, infrastructure, and application security domains. This is a practitioner role. The position partners with IT, I&O, and Legal teams to design and operate security controls that protect student, employee, and operational data across cloud and on-premises environments. The role defines what must be protected and how, coordinates with I&O and Data teams to ensure controls are implemented correctly, and builds validation and reporting of outcomes.\nThis role is a direct replacement for a departing senior team member who owned both data protection and security engineering. Candidates must be comfortable holding both domains simultaneously and ramping quickly into an active program.\nThe Data Protection & Security Engineer will serve as the primary owner of First Student’s data protection capability while also providing hands-on security engineering support across cloud, infrastructure, and application security domains. This is a practitioner role. The position partners with IT, I&O, and Legal teams to design and operate security controls that protect student, employee, and operational data across cloud and on-premises environments. The role defines what must be protected and how, coordinates with I&O and Data teams to ensure controls are implemented correctly, and builds validation and reporting of outcomes.\nThis role is a direct replacement for a departing senior team member who owned both data protection and security engineering. Candidates must be comfortable holding both domains simultaneously and ramping quickly into an active program.\nResponsibilities:\nIdentify and assess:\nOwn enterprise data protection risk assessments, classification standards, and control effectiveness evaluations. Identify data exposure risk across cloud, SaaS, and on-premises environments. Contribute to vulnerability assessments and architecture reviews within the Cybersecurity function.\nSecurely build & protect:\nDesign and define data protection control requirements and standards for DLP, encryption, key management, and data governance across cloud and on-premises environments. Work with I&O and Data teams to ensure controls are implemented to Cybersecurity specifications; validate implementation outcomes. Provide security engineering expertise across cloud infrastructure and endpoint security domains.\nMonitor, hunt, detect:\nMonitor for data misuse, exfiltration, and policy violations. Integrate DLP detection capabilities with SOC workflows. Support SIEM log source expansion and alert quality improvements in coordination with the Security Operations function.\nRespond, recover, sustain:\nLead Cybersecurity response activities for data exposure incidents, including investigation direction, containment guidance to I&O, remediation oversight, and lessons learned.\nGovern, manage, comply, & manage risk:\nDevelop and maintain data protection policies aligned with FERPA, CCPA, Canadian provincial privacy laws, and enterprise risk objectives. Own the data classification framework and drive operationalization across key data stores and workflows. Contribute to management reporting, risk acceptance documentation, and work tracking.\nLead and coordinate:\nProvide technical oversight of cybersecurity analysts. Review work product and deliverables for quality, accuracy, and alignment with standards. Serve as a technical escalation point within the team for data protection and cybersecurity questions.\nDesired qualifications:\nEducation and certifications:\nBachelor’s degree in Computer Science, Information Systems, or equivalent experience.\n7+ years of cybersecurity experience with at least 4 years in data protection, cloud security, or cybersecurity engineering.\nIndustry certifications such as SANS/GIAC (for example, GDSA, GDAT, or equivalent), CISSP, CISM preferred.\nKnowledge & experience:\nHands-on experience configuring and operating DLP platforms (M365 Purview strongly preferred; CrowdStrike Falcon Data Protection preferred; equivalent experience acceptable).\nExperience implementing data classification frameworks in enterprise environments with regulated data (FERPA, COPPA, CCPA, or Canadian privacy law familiarity preferred).\nStrong understanding of AWS security services and cloud-native data protection controls (S3 bucket policies, KMS, Macie, CloudTrail).\nSecurity engineering experience: familiarity with SIEM log sources, endpoint security platforms (CrowdStrike Falcon preferred), and vulnerability management tooling (Rapid7 preferred).\nProficiency with Python or PowerShell for automation, reporting, and control validation.\nFamiliarity with NIST CSF, CIS Controls, and how to translate regulatory requirements into technical controls.\nExperience working across organizational boundaries, such as defining requirements for teams that own implementation and validating outcomes without direct execution authority.\nPrior experience providing technical oversight or mentorship to others.\nPersonal attributes:\nOperates independently and takes clear ownership of outcomes. Comfortable defining requirements and holding other teams accountable for implementation without direct control over execution.\nComfortable holding multiple technical domains simultaneously (data protection and security engineering) and prioritizing across them without daily direction.\nEffective at working across organizational boundaries by communicating requirements clearly, escalating when standards are not met, and building productive working relationships.\nStrong communication skills; able to translate technical data risk into terms meaningful to Legal, and management and executive stakeholders.\nHigh integrity and ownership mindset. Proactive approach to risk reduction.\nAdditional Information\nOccasional off-hour or weekend work may be required, including participation in on-call rotation for cybersecurity incidents.\nMinimal business travel expected.\nRemote or Hybrid (Cincinnati, OH HQ) opportunities available.\nCompensation ranges from $130,000 - $155,000 depending on experience.\n\nFirst for a reason:\nAt First Student, we are a family of 60,000+ employees who take pride in safely transporting more than 5 million students and passengers to and from their destinations each day! Our family of brands include Transco, Total Transportation, Maggies Paratransit, and GVC II. Our employees are at the forefront of safety and innovation; they create and implement the most advanced training and technology the transportation industry has to offer.\nIn the state of Washington, all technician and driving positions, including but not limited to van drivers and any other position requiring employees to drive a company-owned vehicle, are considered safety-sensitive and are therefore subject to drug and alcohol testing, including cannabis.\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. First is also committed to providing a drug-free workplace. First will consider for employment qualified applicants with criminal histories consistent with the requirements of the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Ordinance, and any other fair chance law. Philadelphia’s Fair Criminal Record Screening Standards Ordinance Poster is at this link or upon request https://www.phila.gov/media/20210423160847/Fair-Chance-Hiring-law-poster.pdf.","description_format":"text","description_chars":7615,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Public Transport","Data Loss Prevention","EV Charging"],"lifecycle":[{"event":"open","at":"2026-10-03T12:50:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 1","filings_12m":0,"filings_prev_12m":2,"green_card_filings_12m":1,"median_offered_wage_usd":117500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.24,"p_room":0.28,"age_days":81,"expected_fill_days":9,"reasons":["conf:1","urgency","win:tail","crowd:brand"],"computed_at":"2026-10-06T05:45:30Z"},"pay":{"stated_usd_annual":155000,"is_top_pay":false},"html_url":"https://alion.io/job/first-student-data-protection-engineer","json_url":"https://alion.io/job/first-student-data-protection-engineer.json","meta":{"generated_at":"2026-10-07T01:04:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1782,"day_limit":5000,"remaining_today":3218,"minute_limit":60,"resets_at":"2026-10-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1861742},"rest":"https://alion.io/mcp/rest/get_company?id=1861742"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffirst-student-data-protection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffirst-student-data-protection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffirst-student-data-protection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/first-student-data-protection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffirst-student-data-protection-engineer"}]}