YASH Technologies is Hiring - Data Security Consultant

Job description

**Job Title: Data Security Engineer** Experience: 5 - 7 years Location: Indore/Pune/Hyderabad/Bangalore Department: Cybersecurity **Role Overview** We are seeking an experienced Data Security Engineer to design, implement, and manage enterprise-grade solutions that ensure the confidentiality, integrity, and availability of sensitive data across hybrid and multi-cloud environments. The ideal candidate will bring hands-on expertise in data discovery, classification, assessment, access governance, driving continuous compliance and proactive data risk management. **Key Responsibilities** **1. Data Security Architecture & Engineering** - Design and implement scalable data protection frameworks aligned with enterprise security architecture and compliance standards (ISO 27001, GDPR, HIPAA, PCI DSS, etc.). - Evaluate and deploy data discovery and classification tools (e.g., Microsoft Purview, BigID, Varonis, Symantec DLP, or OneTrust). - Integrate Data Loss Prevention (DLP), CASB, and encryption solutions across endpoints, networks, and cloud services. - Define and implement tokenization, masking, and encryption strategies for structured and unstructured data. **2.** **Data Governance & Compliance** - Collaborate with data governance teams to map data flows and maintain an up-to-date Data Inventory and Risk Register. - Ensure compliance with data residency and privacy regulations, including GDPR, CCPA, and local data protection laws. - Conduct data risk assessments and define remediation plans to reduce exposure of sensitive data and shadow data. **3. Data Breach and AI** - Investigate data-related security incidents and support forensic analysis and reporting. - Drive continuous discovery of shadow data , Insider risk and implement preventive measures. - Working on emerging tools and technologies in data security automation and AI-driven data protection - Proficient in report drafting **Required Skills & Qualifications** - Bachelors or Masters degree in Computer Science, Information Security, or related field. - 5 years of proven experience in data security engineering, information protection. - Certifications such as CDPSE, SC-400, SC-100. **Strong hands-on expertise with:** - Data Discovery & Classification tools (e.g., BigID, Microsoft Purview, Varonis) - DLP Solutions (e.g., Symantec, Forcepoint, Netskope, or McAfee) - CASB & CSPM tools (Netskope, Prisma, or Microsoft Defender for Cloud) - Solid understanding of cloud-native data security controls in AWS, Azure, and GCP. - Knowledge of privacy and compliance frameworks: GDPR, CCPA, NIST 800-53, ISO 27001. - Experience with automation (Python, PowerShell, Terraform) for security operations. - Strong analytical, problem-solving, and communication skills.