Data Security Engineer

UT Southwestern Medical Center is a medical and research center seeking a Data Security Engineer to secure and support its enterprise data platform. The role focuses on security architecture, identity and access management, pipeline security, compliance, vulnerability assessment, secure data transfer, and incident response across cloud-based data environments.

Responsibilities:

• The Data Security Engineer will be responsible for defining and enforcing the security posture of our data ecosystem, while also contributing to core data platform architecture
• Security Architecture & Implementation: Design, implement, and manage advanced security configurations for the data platform, focusing specifically on tools like Azure Purview for data governance, Data Loss Prevention (DLP) strategies, and Data Security Posture Management (DSPM) across cloud environments
• IAM & Access Control: Expertly define, configure, and maintain Identity and Access Management (IAM) and Role-Based Access Control (RBAC) policies across data environments (e.g., data lakes, data warehouses, streaming platforms) to enforce the principle of least privilege
• Data Engineering & Pipeline Security: Collaborate with Data Engineering teams to embed security controls directly into data ingestion and processing pipelines, ensuring data is secured and compliant from source to consumption
• Protocol Establishment: Establish and maintain comprehensive safety protocols and controls to protect all data collected, processed, and used by the organization throughout its entire lifecycle
• Compliance and Governance: Ensure the strict compliance of data security policies, processes, and standard operating procedures (SOPs) within the day-to-day management and operation of the data platform
• Security Assessment and Optimization: Continually assess the effectiveness of existing security measures, identify vulnerabilities, and recommend necessary updates, renewals, or new opportunities for improving the security landscape
• Secure Data Transfer: Implement mechanisms to avoid unsafe data transmission. Design and manage confidential data transfers, ensuring they are protected using robust methods like firewall protection and encryption
• Vulnerability Testing: Plan, execute, and analyze results from regular penetration testing and vulnerability scanning on the data systems to proactively identify and remediate weaknesses
• Incident Response & Forensics: Participate in the data security incident response process, specifically by compiling post-breach information and data for comprehensive forensic analysis and reporting
• Performs other duties as assigned

Requirements:

• Bachelor's Degree in Computer Science, Data Engineering, Cybersecurity, or a related technical field or
  Master's Degree in Computer Science, Data Engineering, Cybersecurity, or a related technical field
• 5 years of professional experience in Data Engineering, Information Security, or a combination of both, with a strong focus on securing large-scale data platforms
• This position does not support H1B visa sponsorship
• the ability to maintain the security or integrity of the critical infrastructure