Sr. Data Security Engineer

The Role

TripleLift is seeking a Senior Data Security Engineer to join our team full-time. We are an established company in the advertising technology sector, trying to tackle some of the most challenging problems facing the industry. You will join a rapidly growing and complex environment and work as part of a small team responsible for developing, evangelizing, and executing our security roadmap. You’ll help drive improvements in our security operations capability and support critical projects, enhancing our detect-and-respond capabilities.

Responsibilities

• Develop and implement data security policies, standards, and procedures that are in accordance with industry best practices and legal requirements.
• Provide technical expertise and guidance to internal teams on data security best practices, encryption technologies, and secure development methodologies. 
• Collaborate with cross-functional teams to integrate data security controls into existing systems, applications, and workflows.
• Design, develop, and improve solutions for Data Loss Prevention and Detection.
• Design and maintain secure data infrastructure, including designing and implementing data pipelines, ETL processes, and data access controls
• Utilize Databricks, Snowflake, Looker, and Airflow to design and secure data models, queries, and integration workflows.
• Participate in agile planning, daily stand-ups, and retrospectives to ensure timely and efficient project delivery.
• Enhance and maintain application and infrastructure vulnerability management programs, perform threat-hunting activities, and facilitate penetration testing.
• Enhance and facilitate security incident-handling activities.
• Evaluate engineering and infrastructure projects for proper alignment to security controls and report identified risks through appropriate channels.
• Create and manage security procedure documentation related to data security.

Desired Skills and Attributes

• Proven experience in data security engineering and a strong background in designing and deploying secure data solutions in a cloud environment (ideally AWS)
• Understanding of data security fundamentals with relation to various cybersecurity and compliance frameworks, particularly NIST CSF, but any of PCI, SOC2, ISO 27001/2, or similar
• Deep understanding of the AWS Cloud, its services, technologies, and APIs
• Deep knowledge of authentication, authorization, encryption, data sanitization, data loss prevention and disaster recovery practices
• Able to design and evaluate data security controls, as well as how to design adequate compensating controls where necessary
• Experience managing tools in a Security Operations Center environment, i.e., monitoring and reacting to SIEM alerts/events
• Practical experience with coding and scripting languages to implement changes to cloud infrastructure and data systems
• Deep understanding of how to securely manage cloud-native environments and the ability to deploy tools in these environments
• Comfortable taking ownership of projects and showcasing key accomplishments
• Strives for continued learning opportunities to build upon craft
• Values correctness and efficiency and has an exceptional eye for detail
• Ability to work quickly and independently with minimal oversight

Experience Requirement

• At least five years of experience working within a security role or related/adjacent role.

#LI-CS1