{"id":2650130,"url":"https://alion.io/job/healthfirst-cyber-security-engineer-data-security","title":"Cyber Security Engineer - Data Security","company":{"id":1794553,"name":"Healthfirst","domain":"healthfirst.org","url":"https://alion.io/company/healthfirst","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":17,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":108300,"max":156485,"currency":"USD","period":"year","gross":null,"usd_annual":156485},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Tokenization","optional":false},{"name":"AI Agents","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-09-21T00:00:00Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-10-16T01:25:15Z","board_verified":true,"closed_at":null,"days_open":25,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":25},"description":"We are seeking a Cyber Security Engineer - Data Security to design, implement, and continuously improve security capabilities that protect sensitive data across the enterprise.This is a hands-on security engineering role focused on understanding where sensitive data resides, how it moves, who and what can access it, and ensuring appropriate controls are implemented throughout the data lifecycle.\nThe engineer will work closely with Security, Infrastructure, Cloud, Data, Application, and AI teams to implement scalable data protection capabilities across cloud, SaaS, application, database, endpoint, and emerging AI environments.\nKey Responsibilities:\nDesign, implement, and maintain enterprise data security controls across cloud, SaaS, applications, databases, endpoints, and AI platforms.\nImplement and improve data discovery, classification, labeling, and protection capabilities for sensitive and regulated data.\nEngineer and operate Data Security Posture Management (DSPM) capabilities to identify sensitive data, excessive exposure, misconfigurations, and inappropriate access.\nDevelop and tune Data Loss Prevention (DLP) controls across endpoint, cloud, email, collaboration, and SaaS environments.\nAssess how sensitive data is stored, processed, transmitted, and accessed and recommend appropriate security controls.\nIdentify excessive or inappropriate access to sensitive data and partner with IAM, Privacy and platform teams to implement least-privilege access.\nSupport encryption, tokenization, masking, secrets protection, and key-management strategies where appropriate.\nDevelop monitoring and detection capabilities for suspicious or unauthorized access, movement, and exfiltration of sensitive data.\nAutomate data security controls, assessments, monitoring, and remediation using APIs, scripting, and security tooling.\nPerform security assessments and threat modeling for systems that store or process sensitive information.\nPartner with application, cloud, data, and AI engineering teams to incorporate data protection requirements into system designs.\nSupport incident investigations involving potential data exposure or exfiltration.\nDevelop technical standards, security patterns, and engineering guidance for protecting sensitive data. \nMinimum Qualification:\nTechnical Degree in Computer Science, Cyber Security and/or a High School Diploma/GED from an accredited institution along with equivalent work experience\nEntry-level experience in at least two of the following areas: security engineering, network penetration, incident response, threat hunting, and governance risk & compliance\n\nPreferred Qualifications:\n3+ years of experience in cybersecurity, security engineering, cloud security, data security, or a related technical discipline.\nHands-on experience implementing or operating enterprise data protection, DLP, DSPM, or data security technologies.\nStrong understanding of data security principles including discovery, classification, access control, encryption, data loss prevention, and monitoring.\nExperience securing data across cloud, SaaS, database, and application environments.\nUnderstanding of IAM concepts including authentication, authorization, RBAC, least privilege, and privileged access.\nExperience with at least one major cloud platform such as Azure, AWS, or Google Cloud.\nExperience with security automation, scripting, or APIs; Python, PowerShell, or comparable experience preferred.\nStrong understanding of security architecture and common data-exfiltration techniques.\nAbility to troubleshoot complex technical issues and translate identified risks into practical engineering solutions.\nStrong written and verbal communication skills with the ability to collaborate across security and engineering teams.\nExperience implementing or operating DSPM/CNAPP/data security platforms in large enterprise environments.\nExperience with enterprise DLP technologies across endpoint, email, cloud, and SaaS environments.\nExperience with Microsoft Purview, Microsoft Defender, or comparable enterprise data security technologies.\nExperience securing structured and unstructured data across databases, data lakes, warehouses, object storage, and collaboration platforms.\nExperience with encryption, key management, tokenization, masking, or secrets-management technologies.\nExperience developing automated data security controls and remediation workflows.\nExperience with Infrastructure as Code and incorporating security controls into cloud deployments.\nUnderstanding of data security considerations for generative AI and agentic AI, including preventing inappropriate access to or disclosure of sensitive information.\nFamiliarity with data governance, retention, privacy, and regulatory requirements.\nExperience protecting PHI, PII, financial, or other sensitive data in a regulated environment.\nWE ARE AN EQUAL OPPORTUNITY EMPLOYER. HF Management Services, LLC complies with all applicable laws and regulations. Applicants and employees are considered for positions and are evaluated without regard to race, color, creed, religion, sex, national origin, sexual orientation, pregnancy, age, disability, genetic information, domestic violence victim status, gender and/or gender identity or expression, military status, veteran status, citizenship or immigration status, height and weight, familial status, marital status, or unemployment status, as well as any other legally protected basis. HF Management Services, LLCshallnotdiscriminateagainstanydisabledemployeeorapplicantinregard to any position for which the employee or applicant is otherwise qualified.\nIf you have a disability under the Americans with Disability Act or a similar law and want a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to  or calling 212-519-1798 . In your email please include a description of the accommodation you are requesting and a description of the position for which you are applying. Only reasonable accommodation requests related to applying for a position within HF Management Services, LLC will be reviewed at the e-mail address and phone number supplied. Thank you for considering a career with HF Management Services, LLC.\nKnow Your Rights\nAll hiring and recruitment at Healthfirst is transacted with a valid “@healthfirst.org” email address only or from a recruitment firm representing our Company. Any recruitment firm representing Healthfirst will readily provide you with the name and contact information of the recruiting professional representing the opportunity you are inquiring about. If you receive a communication from a sender whose domain is not @healthfirst.org, or not one of our recruitment partners, please be aware that those communications are not coming from or authorized by Healthfirst. Healthfirst will never ask you for money during the recruitment or onboarding process.\nHiring Range*:\nGreater New York City Area (NY, NJ, CT residents): $108,300 - $156,485\n\nAll Other Locations (within approved locations): $99,100 - $147,390\n\nAs a candidate for this position, your salary and related elements of compensation will be contingent upon your work experience, education, licenses and certifications, and any other factors Healthfirst deems pertinent to the hiring decision.\nIn addition to your salary, Healthfirst offers employees a full range of benefits such as, medical, dental and vision coverage, incentive and recognition programs, life insurance, and 401k contributions (all benefits are subject to eligibility requirements). Healthfirst believes in providing a competitive compensation and benefits package wherever its employees work and live.\n*The hiring range is defined as the lowest and highest salaries that Healthfirst in “good faith” would pay to a new hire, or for a job promotion, or transfer into this role.","description_format":"text","description_chars":7891,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"New Jersey","iso":null,"kind":"city"},{"name":"Connecticut","iso":null,"kind":"city"},{"name":"New York","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Health Care","Data Loss Prevention","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-10-15T21:22:10Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.478,"p_room":0.55,"age_days":25,"expected_fill_days":24,"reasons":["conf:4","stale_co","win:tail"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":156485,"is_top_pay":true},"html_url":"https://alion.io/job/healthfirst-cyber-security-engineer-data-security","json_url":"https://alion.io/job/healthfirst-cyber-security-engineer-data-security.json","meta":{"generated_at":"2026-10-16T15:53:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":190,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1794553},"rest":"https://alion.io/mcp/rest/get_company?id=1794553"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhealthfirst-cyber-security-engineer-data-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhealthfirst-cyber-security-engineer-data-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhealthfirst-cyber-security-engineer-data-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/healthfirst-cyber-security-engineer-data-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhealthfirst-cyber-security-engineer-data-security"}]}