Data Protection Engineer

Data Protection Engineer, 170k plus bonus, Fortune Insurance Company, Midtown ManhattanHYBRID MODEL, 3 DAYS ON SITEMUST BE A GREEN CARD OR US CITIZENMUST HAVE STRONG TECHNICAL BACKGROUND, PYTHON, SQL, AND DATABRICKSThe Data Protection Engineer strengthens enterprise data protection capabilities by designing, implementing, automating, and maintaining technical controls that protect sensitive information across cloud-based data environments, in support of our obligations as a regulated financial services and insurance company.As a hands-on individual contributor within the Data Governance and Data Risk Management function, this role focuses on sensitive data discovery and classification, Data Security Posture Management (DSPM), data masking and tokenization, protection monitoring, and integration of enterprise data protection technologies using platforms such as Databricks, Securiti.ai, Anomalo, and Atlan.The engineer works closely with Data Governance, Data Risk Management, Cybersecurity, Cloud Engineering, and business and technology stakeholders to identify protection gaps, implement scalable solutions, improve visibility into sensitive data exposure, and drive adoption of data protection tools and practices.5+ years of professional experience in software engineering, data engineering, data security engineering, or a related technical discipline.2+ years of hands-on experience implementing data protection, data security, or DSPM capabilities (for example, sensitive data discovery, classification, masking, tokenization, or access controls).Strong programming skills in Python and SQL, including building automation, integrations, and data processing workflows.Hands-on experience with cloud-based data environments such as AWS, GCP, or Databricks.Practical knowledge of sensitive data discovery, classification, masking, tokenization, and data protection controls for structured and unstructured data.Understanding of DSPM principles, sensitive data exposure identification, and technical remediation approaches.Experience integrating enterprise platforms through APIs, custom connectors, or automated workflows.Working knowledge of data security concepts, including authentication, authorization, secrets management (for example, AWS Secrets Manager), and secure data handling.