Data Security Engineer

We are seeking an experienced Data Security Engineer with 4 to 5 years of experience in designing, deploying, and maintaining enterprise data protection, encryption infrastructure, and database security solutions. The ideal candidate will possess deep hands-on expertise in Thales CipherTrust Manager, IBM Guardium/Imperva DAM & FAM, key management, and ISO27001 compliance framework implementations. This role is responsible for securing critical data assets across multi-site infrastructure, supporting PCI DSS and GDPR audits, and configuring robust perimeter and endpoint security controls. Data Encryption & Key Management: Deploy, configure, and maintain Thales CipherTrust Manager (CM), Transparent Data Encryption (TDE), CipherTrust Application Data Protection (CAKM), CipherTrust Transparent Encryption (CTE), and Hardware Security Modules (HSMs) using KMIP protocols across enterprise sites. Database & File Monitoring: Administer IBM Guardium and Imperva Database Activity Monitoring (DAM) and File Activity Monitoring (FAM), including S-Tap agent installations, collector configurations, and policy enforcement. Compliance & Governance: Implement and lead ISO27001 control frameworks, conduct risk assessments, and prepare evidence to support PCI DSS, GDPR, and statutory financial compliance audits. Endpoint & Data Loss Prevention: Manage Data Loss Prevention (DLP) tools like Safetica, alongside endpoint protection solutions (Heimdal, Microsoft Defender), ensuring policy compliance across corporate devices. Security Operations & Monitoring: Monitor SIEM platforms (FortiSIEM), analyze EDR/DLP alerts, perform triage, and drive rapid incident response and vulnerability patch management. Network & Perimeter Security: Configure and maintain WAF, IPS/IDS, Active Directory, firewalls, and IPSec VPN tunnels to secure enterprise perimeter connectivity. Vulnerability Assessment: Conduct security posture evaluations, vulnerability assessments, and red team testing using tools s