Data Protection Engineer

About the Role

SandboxAQ is a growing, fully remote technology company, which is striving to follow best security practices. We are looking for an engineer to take ownership of our data protection  capabilities and help strengthen our security posture. As part of the Information Security team, this engineer will play a critical role in keeping our data safe as well as maintaining high levels of security assurance for our customers.

What You’ll Do

• Work cross-functionally to ensure security and privacy of SandboxAQ and customer data
• Develop strategies and automation around data classification and monitoring
• Work within AWS and GCP environments making sure our systems are configured correctly and architected following best security practices
• Assist product teams in design of multi-tenant SaaS products
• Act as the steward of CUI data within our organization
• Automate vulnerability detection, data loss prevention (DLP), and privacy incident response across cloud platforms
• Collaborate with the development, DevOps, and InfoSec team to integrate privacy solutions into CI/CD pipelines
• Document privacy architectures, data flows, and technical implementations

Who You Are

• U.S. citizenship is required due to USG contract requirements
• Experienced in managing confidentiality, integrity and availability of data within cloud environments, both manually and through automation
• Have an understanding of industry best practices and tooling, including their limitations
• Proficient in risk-based decision making as it applies to data classification
• Have worked with CUI data and are familiar with CMMC 2.0 / NIST 800-171 controls
• Able to develop sensible data retention policies
• Strong communication skills and ability to work across different groups to build consensus on scalable data design patterns

Nice To Have

• Have actively participated in standing up SOC2 compliance
• Practical experience with GDPR / CPPA / similar conformance
• Experience with GCP DLP and Amazon Macie
• Experience with Infra-as-code, such as Terraform or similar
• Reliability engineering mentality: ability to design scalable, maintainable, and testable infrastructure

The US base salary range for this full-time position is expected to be $154k - $216k per year. Our salary ranges are determined by role and level. Within the range, individual pay is determined by factors including job-related skills, experience, and relevant education or training. This role may be eligible for annual discretionary bonuses and equity.