Senior Security Engineer, Data Protection

- Act as a Cryptography Specialist with substantial hands-on experience in key management, HSMs, certificate lifecycles, and enterprise vaulting, focusing on products like HashiCorp Vault or Thales. - Serve as a Database and Product Security Engineer with a solid foundation in database development or administration as well as application development, aiding teams in implementing encryption or tokenization and resolving integration issues. - Design, create, and maintain cryptographic services that safeguard data both at rest and in use across databases, file shares, and applications. - Implement encryption, tokenization, and secrets management patterns, ensuring seamless integration into application and data workflows. - Provide guidance to engineering teams regarding connection string updates, certificate-based authentication, HSM-backed key operations, and column-level encryption. - Create reference implementations, SDKs, and runbooks that facilitate secure defaults for product and data teams. - Assess and adopt data discovery and classification tools to identify and mitigate the risk of sensitive data exposure in diverse environments. - Lead security risk assessments for both on-premises and cloud data services, translating findings into practical engineering tasks. - Develop and share program metrics and dashboards illustrating adoption rates, coverage, and control effectiveness for senior leadership. - Clearly present recommendations to senior leaders while mentoring engineers and DBAs in best practices. - Contribute to security as a service by providing patterns, streamlined processes, and consultative support to partner teams.