Job Description

Title; Data Security Engineer / Cyera DSPM specialist

Location: Princeton NJ – onsite only

Duration: Full Time

 Role Summary
Own the end-to-end technical design, deployment, integration, configuration, and operation of the Cyera DSPM platform across AWS, GCP, Azure, enterprise data platforms, and Microsoft 365. The role establishes the classification taxonomy and business glossary, deploys and operates Cyera Outpost, onboards priority data sources, develops and tunes classifiers and topics, integrates security and governance platforms, monitors service health, triages findings, and supports remediation while ensuring raw data remains within the company environment.Key ResponsibilitiesDesign and own the enterprise data classification taxonomy, including custom classes for business-specific data not covered by out-of-the-box classifiers.Define the business glossary structure, map platform schemas and metadata to the taxonomy, and facilitate validation workshops with data stewards, Legal, GRC, and business stakeholders.Architect, provision, and operate Cyera Outpost across AWS, GCP, and Azure, including regional deployment, private connectivity, capacity planning, scaling, patching, upgrades, monitoring, and troubleshooting.Configure AWS PrivateLink, GCP Private Service Connect, Azure Private Endpoint, IAM roles, service accounts, and service principals using least-privilege principles.Build and maintain Terraform-based infrastructure-as-code, operational runbooks, integration prerequisites, and support documentation.Prioritize and onboard data sources across Databricks, Snowflake, Microsoft Fabric, Microsoft 365, cloud storage, and other enterprise platforms.Partner with platform and data owners to establish approved access patterns, resolve connectivity and permission issues, and improve metadata quality.Prepare representative and labeled sample data sets for classifier design, validation, tuning, and accuracy measurement.Configure the Cyera tenant, run baseline scans, assess coverage gaps, and monitor platform health, scan execution, and Outpost connectivity.Develop and tune custom classifiers using regex, keyword and proximity logic, exact data match, fingerprinting, and ML-based methods.Design context-aware topics that combine classifiers, metadata, access, and risk signals; test accuracy against agreed thresholds and track false positives and false negatives.Design, configure, and test integrations with Wiz, Data.World, IAM, SIEM/SOAR, data catalog, governance, lineage, and backup-tagging processes.Triage findings, support remediation workflows, document operational handoffs, and collaborate with security operations and incident response teams when required.Lead recurring taxonomy, glossary, data-source coverage, and platform-governance reviews, and maintain alignment with internal policies and applicable regulatory frameworks.

͏

Areas of responsibility

Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.

Incident Handling and Analysis-Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption

Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.

Stakeholder Coordination and Audit Assistance-"Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks.

Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance."

Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.

͏

͏

͏