Data Security Engineer

The Life Time Technology team is at the forefront of the evolution of Life Time into a digital-first company, transforming existing experiences and creating brand new ones both online and in our clubs. If you enjoy a fast-paced environment with the latest technologies and have a passion for health and fitness – we should meet. Work is a team effort, and we are a highly motivated, highly collaborative team; we always win or lose together. We invest in our team members and ensure they have the tools and opportunities to learn, grow and thrive. We offer an incredible benefits package, generous club discounts, and a fully subsidized Signature Life Time Membership. Want to Love Your Life? Join our team.
Position Summary
As a Data Security Engineer at Life Time, you will protect the information our members, vendors, and employees trust us with, from member records across our clubs to payment and health data.
You are the Security team’s subject matter expert for data protection. Your primary goal is to protect Life Time’s data from unauthorized access, misuse, and loss, whether the threat is internal or external. You run our data security posture management (DSPM) platform, turn its findings into fixes with data owners, and partner with data, engineering, privacy, legal, and compliance teams to secure sensitive data across our on-premises, cloud, and SaaS environments. When a data incident happens, you help us respond quickly and thoroughly. You also advocate for secure data handling practices across the company.
Working with the Security Architect, you will help shape our data loss prevention program as we select and roll out enforcement tooling, and help the business adopt AI tools and assistants without oversharing sensitive data. This role suits someone who enjoys hands-on engineering, can explain technical risk in plain language, and wants to see their work measurably reduce exposure.
Job Duties and Responsibilities
Partner with technology, data, and analytics teams to build data protection and privacy by design into new systems, data pipelines, and products
Operate and tune our DSPM platform to discover and classify sensitive data (PII, payment card data, health information, and confidential business data) across cloud, SaaS, and on-premises environments
Drive remediation of overexposed, misclassified, and abandoned data with data owners, including data exposed to AI tools and assistants
Help select, deploy, and tune data loss prevention (DLP) controls across endpoint, email, web, and SaaS channels, using data classification results to drive policy
Partner with infrastructure and the Security Architect to review and improve encryption, tokenization, masking, and key management for data at rest and in transit
Enforce least-privilege access to sensitive data and secure cloud data platforms through access reviews, guardrails, and remediation
Triage data detection and response alerts and build alerting for anomalous data access and exfiltration with our Security Operations Center
Participate in incident response involving data exposure as a responder, subject matter expert, and/or liaison to technology, legal, and business teams
Develop data security standards, procedures, runbooks, and automations, support compliance efforts (e.g., PCI DSS, HIPAA for applicable business units, state privacy laws), and share data security knowledge with Security Analysts
Position Requirements
Bachelor’s Degree in Computer Science, Information Security, or related field or equivalent combination of education and experience
3+ years of experience in cybersecurity or a similar role, including at least 2 years focused on data security or data protection
Extensive understanding of modern data security concepts and privacy-by-design principles
Deep understanding of one or more security or privacy frameworks (NIST CSF, NIST Privacy Framework, CIS, etc.) and how to incorporate them
Hands-on experience with at least two of the following: DSPM, data classification, DLP, or data access governance tools
Working knowledge of encryption, tokenization, and key management concepts (PKI, cloud KMS)
Experience securing data in public cloud, cloud data warehouse, and SaaS productivity environments
Familiarity with PCI DSS, HIPAA, and U.S. state privacy laws (e.g., CCPA/CPRA)
Familiarity with SIEM and logging platforms, SQL, and scripting (Python, PowerShell, or similar)
Excellent customer service, communication, and documentation skills
PayThis is a salaried position starting at $94,000.00(or applicable minimum salary, if higher) and pays up to $129,000.00, based on experience and qualifications.
Benefits
All team members receive the following benefits while working for Life Time:
A fully subsidized membership
Discounts on Life Time products and services
401(k) retirement savings plan with company discretionary match (21 years of age and older)
Training and professional development
Paid sick leave where required by law
Full-time Team Members are eligible for additional benefits, including:
Medical, dental, vision, and prescription drug coverage
Short term and long term disability insurance
Life insurance
Pre-tax flexible spending and dependent care plans
Parental leave and adoption assistance
Paid time off, including 5 to 20 vacation days per calendar year (based on tenure) and paid sick leave
Deferred compensation plan, if the team member meets the required income threshold
Life Time is a place for everyone. As an organization, we are committed to an inclusive, diverse and equitable workplace that respects and celebrates the unique contributions of each individual while ensuring we remain an equal opportunity employer that recruits, hires, trains and promotes based on merit and qualifications.

Skills
Python, SQL, Documentation