Data Security Engineer (Cyera DSPM)

Location: Princeton NJ – Onsite

Key Responsibilities: Design and own the enterprise data classification taxonomy, including custom classes for business-specific data not covered by out-of-the-box classifiers. Define the business glossary structure, map platform schemas and metadata to the taxonomy, and facilitate validation workshops with data stewards, Legal, GRC, and business stakeholders. Architect, provision, and operate Cyera Outpost across AWS, GCP, and Azure, including regional deployment, private connectivity, capacity planning, scaling, patching, upgrades, monitoring, and troubleshooting.

Configure AWS Private: Link, GCP Private Service Connect, Azure Private Endpoint, IAM roles, service accounts, and service principals using least-privilege principles. Build and maintain Terraform-based infrastructure-as-code, operational runbooks, integration prerequisites, and support documentation. Prioritize and onboard data sources across Databricks, Snowflake, Microsoft Fabric, Microsoft 365, cloud storage, and other enterprise platforms. Partner with platform and data owners to establish approved access patterns, resolve connectivity and permission issues, and improve metadata quality. Prepare representative and labeled sample data sets for classifier design, validation, tuning, and accuracy measurement. Configure the Cyera tenant, run baseline scans, assess coverage gaps, and monitor platform health, scan execution, and Outpost connectivity. Develop and tune custom classifiers using regex, keyword and proximity logic, exact data match, fingerprinting, and ML-based methods. Design context-aware topics that combine classifiers, metadata, access, and risk signals; test accuracy against agreed thresholds and track false positives and false negatives. Design, configure, and test integrations with Wiz, Data. World, IAM, SIEM/SOAR, data catalog, governance, lineage, and backup-tagging processes. Triage findings, support remediation workflows, document operational handoffs, and collaborate with security operations and incident response teams when required. Lead recurring taxonomy, glossary, data-source coverage, and platform-governance reviews, and maintain alignment with internal policies and applicable regulatory frameworks.