Data Security Engineer II

Centene Corporation is a diversified national organization focused on improving health outcomes for its 28 million members through technology. The Data Security Engineer II is responsible for the design, implementation, and operational stability of enterprise data protection systems, ensuring compliance and enhancing the organization’s data security posture.

Responsibilities:

• Support enhancements to Data Security Posture Management (DSPM) tools
• Develop systems for detecting sensitive data accessed by or used in large language models (LLMs)
• Work with platforms like AWS, Azure, and Google Cloud to implement secure configurations and controls
• Assist in correlating DLP events with SIEM/SOAR telemetry for automated response
• Prepare reports based on facilities metrics and data access trends
• Apply metadata tagging and sensitivity labels aligned with HIPAA, NIST, and ISO 270013
• Support audit readiness and policy enforcement
• Ensure ongoing stability of server environments and assist with service request fulfillment
• Document standard operating procedures and support release testing
• Performs other duties as assigned
• Complies with all policies and standards

Requirements:

• A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and requires 2 – 4 years of related experience
• Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position
• Strong grasp of confidentiality, integrity, availability, authentication, and non-repudiation
• Ability to determine how a security system should work and how changes in conditions or operations affect outcomes
• Experience developing and applying system access controls across platforms
• Experience with tools that discover, classify, and monitor sensitive data across hybrid environments
• Ability to develop systems for identifying sensitive data used in or accessed by large language models
• Familiarity with applying sensitivity labels aligned with governance standards
• Proficiency in AWS, Azure, and Google Cloud, as well as on-premise infrastructure
• Experience with USB/CD-R restrictions and outbound monitoring
• Ability to integrate DLP with SIEM/SOAR platforms for automated threat detection and response
• Experience in troubleshooting and resolving system service issues
• Intermediate - Seeks to acquire knowledge in area of specialty
• Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
• Intermediate - Ability to work independently
• CISSP Certified Information Systems Security Professional
• Proofpoint Email Fraud Defense
• Security+, Cloud+, CEH, CHFI, and Microsoft/AWS certifications are highly valued but not required