Information Security Engineer and Data Protection

About the Role:
We are seeking an experienced, highly technical Information Security Engineer with a proven track record of implementing data protection tools end to end. In this role, you will lead ePHI discovery and inventory work from deployment through day-to-day operation, working from a defined strategy set by security leadership. You will implement a data security posture management (DSPM) platform and related tooling, mature existing DLP and SASE controls, and build an accurate, well-maintained inventory of where ePHI lives across cloud and SaaS environments. You will also support vulnerability remediation and back up incident response. The ideal candidate is hands-on, communicates clearly, and uses AI to work more efficiently.
What You'll Be Doing:
Own ePHI discovery and inventory, finding, classifying, and inventorying ePHI across cloud storage, databases, file shares, and SaaS applications, and keeping that inventory accurate as systems change.
Implement a DSPM platform end to end, connecting data sources, tuning classifiers, identifying sensitive data that is over-exposed, unencrypted, or broadly accessible, and partnering with system owners to right-size access and fix misconfigurations.
Integrate supporting tooling such as asset inventory and data classification so discovery results feed the system of record, documenting configurations and runbooks along the way.
Mature DLP and SASE controls across the secure web gateway, CASB, DLP, and zero-trust stack by tuning policies to reduce false positives and negatives, strengthening enforcement, and building repeatable response processes for PHI movement events.
Establish GenAI and shadow IT guardrails by identifying unsanctioned AI and SaaS tools and applying policies that enable safe use while blocking what should not be allowed. Support the vulnerability remediation lifecycle by monitoring critical public vulnerabilities, validating bug bounty, pen test, and scanner findings, routing them to the right teams, and confirming fixes.
Back up incident response using the established plan when the primary responder is unavailable, and investigate data exfiltration and insider risk events surfaced by data protection controls.
Partner with GRC by handing technical control gaps to the GRC analyst for tracking.
Support security operations including security tooling administration, TLS inspection exceptions, and technical off-boarding.
What We're Looking For:
Experience: 7+ years in security engineering, with a proven track record of implementing security tools end to end, not only operating them.
Data Security Platforms: Hands-on implementation experience with DSPM, data discovery, or data classification platforms.
DLP and SASE: Hands-on experience implementing and tuning DLP and SASE, SSE, or CASB solutions.
Cloud and SaaS Data: Deep understanding of how data is stored and accessed across major cloud platforms and SaaS applications.
AI Proficiency: Day-to-day use of AI tools to gain efficiency, plus an understanding of how to secure them.
Communication: Strong written and verbal communication skills.
Nice to Have:
Healthcare or other highly regulated industry experience.
Vulnerability management or bug bounty triage experience.
Asset inventory or CAASM implementation experience.
Scripting experience (Python, PowerShell, JavaScript, or similar).
Identity provider and SSO experience.
CISSP, GIAC, or similar certifications (not required).
Why Lumenalta is an amazing place to work at:
At Lumenalta, you can expect that you will:
Be 100% dedicated to one project at a time so that you can innovate and grow.
Be a part of a team of talented and friendly senior-level developers.
Work on projects that allow you to use leading tech.
Salary:
Salary range: $100,000 - $160,000 annually, with final compensation determined by your qualifications, expertise, experience, and the role's scope.
Location:
This is a fully remote position. This role is remote within the United States only. Candidates must reside in the United States while assigned to our client and be physically located within the United States when performing project work or accessing project systems or data. Availability to work Eastern U.S. time zone business hours.
Benefits:
In addition to competitive pay, we offer a variety of benefits to support your professional and personal growth, including:
Flexible working hours in a remote environment.
Health insurance (medical and dental) for W2 Employees.
401K Contribution.
A professional development fund to enhance your skills and knowledge.
15 days of paid time off annually.
Access to soft-skill development courses to further your career.
Position Details:
This is a full-time position requiring a minimum of 40 hours per week, Monday through Friday.
At Lumenalta, we are committed to creating an environment that prioritizes growth, work-life balance, and the diverse needs of our team members.
Application Deadline:
Applications will be accepted until October 25th, 2026. Candidates can expect feedback by November 2nd, 2026.

Work arrangement
Yes