Job description

#### About the Role We are seeking an experienced, highly technical Information Security Engineer with a proven track record of implementing data protection tools end to end. In this role, you will lead ePHI discovery and inventory work from deployment through day-to-day operation, working from a defined strategy set by security leadership. You will implement a data security posture management (DSPM) platform and related tooling, mature existing DLP and SASE controls, and build an accurate, well-maintained inventory of where ePHI lives across cloud and SaaS environments. You will also support vulnerability remediation and back up incident response. The ideal candidate is hands-on, communicates clearly, and uses AI to work more efficiently. #### What You'll Be Doing * Own ePHI discovery and inventory, finding, classifying, and inventorying ePHI across cloud storage, databases, file shares, and SaaS applications, and keeping that inventory accurate as systems change. * Implement a DSPM platform end to end, connecting data sources, tuning classifiers, identifying sensitive data that is over-exposed, unencrypted, or broadly accessible, and partnering with system owners to right-size access and fix misconfigurations. * Integrate supporting tooling such as asset inventory and data classification so discovery results feed the system of record, documenting configurations and runbooks along the way. * Mature DLP and SASE controls across the secure web gateway, CASB, DLP, and zero-trust stack by tuning policies to reduce false positives and negatives, strengthening enforcement, and building repeatable response processes for PHI movement events. * Establish GenAI and shadow IT guardrails by identifying unsanctioned AI and SaaS tools and applying policies that enable safe use while blocking what should not be allowed. Support the vulnerability remediation lifecycle by monitoring critical public vulnerabilities, validating bug bounty, pen test, and scanner findings, routing them to the right teams, and confirming fixes. * Back up incident response using the established plan when the primary responder is unavailable, and investigate data exfiltration and insider risk events surfaced by data protection controls. * Partner with GRC by handing technical control gaps to the GRC analyst for tracking. * Support security operations including security tooling administration, TLS inspection exceptions, and technical off-boarding. #### What We're Looking For * Experience: 7+ years in security engineering, with a proven track record of implementing security tools end to end, not only operating them. * Data Security Platforms: Hands-on implementation experience with DSPM, data discovery, or data classification platforms. * DLP and SASE: Hands-on experience implementing and tuning DLP and SASE, SSE, or CASB solutions. * Cloud and SaaS Data: Deep understanding of how data is stored and accessed across major cloud platforms and SaaS applications. * AI Proficiency: Day-to-day use of AI tools to gain efficiency, plus an understanding of how to secure them. * Communication: Strong written and verbal communication skills. #### Nice to Have * Healthcare or other highly regulated industry experience. * Vulnerability management or bug bounty triage experience. * Asset inventory or CAASM implementation experience. * Scripting experience (Python, PowerShell, JavaScript, or similar). * Identity provider and SSO experience. * CISSP, GIAC, or similar certifications (not required). #### Why Lumenalta is an amazing place to work at At Lumenalta, you can expect that you will: * Be 100% dedicated to one project at a time so that you can innovate and grow. * Be a part of a team of talented and friendly senior-level developers. * Work on projects that allow you to use leading tech. #### Location This is a fully remote position; however, candidates must be based in United States of America and align with the Pacific, Central, or Eastern, time zones to ensure effective collaboration with client and team schedules. #### Application Deadline Applications will be accepted until **October 25, 2026**. Candidates can expect feedback by **November 2nd, 2026**.

Requirements

Must-haves

#### About the Role
#### What You'll Be Doing
Own ePHI discovery and inventory, finding, classifying, and inventorying ePHI across cloud storage, databases, file shares, and SaaS applications, and keeping that inventory accurate as systems change.
Integrate supporting tooling such as asset inventory and data classification so discovery results feed the system of record, documenting configurations and runbooks along the way.
Establish GenAI and shadow IT guardrails by identifying unsanctioned AI and SaaS tools and applying policies that enable safe use while blocking what should not be allowed.
Support the vulnerability remediation lifecycle by monitoring critical public vulnerabilities, validating bug bounty, pen test, and scanner findings, routing them to the right teams, and confirming fixes.
Back up incident response using the established plan when the primary responder is unavailable, and investigate data exfiltration and insider risk events surfaced by data protection controls.
Partner with GRC by handing technical control gaps to the GRC analyst for tracking.
Support security operations including security tooling administration, TLS inspection exceptions, and technical off-boarding.
#### What We're Looking For
Experience: 7+ years in security engineering, with a proven track record of implementing security tools end to end, not only operating them.
Data Security Platforms: Hands-on implementation experience with DSPM, data discovery, or data classification platforms.
DLP and SASE: Hands-on experience implementing and tuning DLP and SASE, SSE, or CASB solutions.
Cloud and SaaS Data: Deep understanding of how data is stored and accessed across major cloud platforms and SaaS applications.
AI Proficiency: Day-to-day use of AI tools to gain efficiency, plus an understanding of how to secure them.
Communication: Strong written and verbal communication skills.
Healthcare or other highly regulated industry experience.
Vulnerability management or bug bounty triage experience.
Asset inventory or CAASM implementation experience.
Scripting experience (Python, PowerShell, JavaScript, or similar).
Identity provider and SSO experience.
CISSP, GIAC, or similar certifications (not required).
#### Why Lumenalta is an amazing place to work at

Nice-to-haves

#### Nice to Have

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aipythonjavascript

Platform: careers-page
Effort: medium