Senior Data Security Engineer

We are seeking an experienced professional to help design, assess, and secure modern data platforms across on-prem and cloud environments (AWS, Azure, GCP a plus). This role involves guiding security-by-design practices for data ingestion, storage, processing, orchestration, and governance while balancing client-facing work and internal standards development.

Key Responsibilities

• Security Design & Analysis: Evaluate IAM/RBAC/ABAC models, encryption, key/secrets management, data retention, and network boundaries. Assess data flows, classify sensitive datasets, and design secure architectures and guardrails.
• Compliance & Testing: Perform threat modeling, review configurations and code for security issues, and integrate checks into CI/CD pipelines. Ensure alignment with frameworks such as SOC 2, ISO 27001, NIST, HIPAA, PCI, and GDPR/CCPA. Deliver risk assessments, remediation roadmaps, and executive-ready reports.
• Collaboration: Work closely with data, analytics, ML, DevOps, and security teams to embed controls across the data lifecycle. Contribute to reusable playbooks, policies, and open-source reference stacks. Support pre-sales by assisting with workshops, scoping, and proposals.
• Incident Response & Improvement: Provide guidance during data-related security incidents, track remediation progress, and evolve standards based on lessons learned. Stay current on emerging technologies like DSPM, DLP, data contracts, and zero-trust data access.

Required Qualifications

• 6-8 years of professional data engineering experience with strong SQL and Python skills.
• Hands-on expertise with Spark, Databricks, Snowflake, or Redshift in production.
• Experience designing secure pipelines, warehouses, and Lakehouse architectures on AWS and/or Azure.
• Proficiency with Docker, Git-based CI/CD, Terraform (or equivalent IaC), and security fundamentals (IAM, encryption, KMS/HSM, secrets management, network segmentation).
• Knowledge of data modeling, governance, lineage, and retention practices.
• Strong communication skills with experience in consulting or client-facing environments.

Preferred Qualifications

• Orchestration and transformation tools (Airflow, Dagster, Prefect, dbt).
• Streaming and CDC platforms (Kafka, Kinesis, Event Hubs, Debezium).
• Data quality and catalog/lineage tools (Great Expectations, Soda, Monte Carlo, DataHub, OpenMetadata, Purview).
• Cloud-native governance and DLP/DSPM tools.
• Familiarity with policy-as-code (OPA, Sentinel).
• Relevant certifications such as AWS/Azure/GCP Architect or Security, CISSP, or CCSP.

Desired Competencies

• Strong problem-solving and threat-modeling mindset.
• Ability to explain complex security concepts to technical and non-technical stakeholders.
• Highly collaborative across engineering, product, and security functions.
• Commitment to continuous learning and staying ahead of emerging threats.
• Strong attention to detail in reviews, audits, and design.
  

Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply.

California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

If you would like to complete our voluntary self-identification form, please click here or copy and paste the following link into an open window in your browser: https://jobs.beaconhillstaffing.com/eeoc/

Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records.

Company Profile:

Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs.

Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles.

Learn more about Beacon Hill and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting www.bhsg.com.

Benefits Information:

Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.

We look forward to working with you.

Beacon Hill. Employing the Future™