Data Security Engineer

Life Time Inc.

19h • $94,000 - $129,000

About The Position

As a Data Security Engineer at Life Time, you will protect information entrusted to the company by members, vendors, and employees, including member records, payment data, and health data. You will serve as the Security team’s subject matter expert for data protection, operating the data security posture management (DSPM) platform and working with data owners to remediate findings. You will partner with data, engineering, privacy, legal, and compliance teams to secure sensitive information across on-premises, cloud, and SaaS environments, assist with data incident response, and promote secure data handling practices.

Working with the Security Architect, you will help shape the data loss prevention program, including selection and rollout of enforcement tools, and support safe adoption of AI tools and assistants. The role combines hands-on engineering with explaining technical risk in plain language and reducing data exposure.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or an equivalent combination of education and experience.
• At least 3 years of experience in cybersecurity or a similar role, including at least 2 years focused on data security or data protection.
• Extensive understanding of modern data security concepts and privacy-by-design principles.
• Deep understanding of one or more security or privacy frameworks, such as NIST CSF, NIST Privacy Framework, or CIS, and how to incorporate them.
• Hands-on experience with at least two of the following: DSPM, data classification, DLP, or data access governance tools.
• Working knowledge of encryption, tokenization, and key management concepts, including PKI and cloud KMS.
• Experience securing data in public cloud, cloud data warehouse, and SaaS productivity environments.
• Familiarity with PCI DSS, HIPAA, and U.S. state privacy laws such as CCPA/CPRA.
• Familiarity with SIEM and logging platforms, SQL, and scripting such as Python, PowerShell, or similar.
• Excellent customer service, communication, and documentation skills.

Responsibilities

• Partner with technology, data, and analytics teams to incorporate data protection and privacy by design into new systems, data pipelines, and products.
• Operate and tune the DSPM platform to discover and classify sensitive data, including PII, payment card data, health information, and confidential business data, across cloud, SaaS, and on-premises environments.
• Drive remediation of overexposed, misclassified, and abandoned data with data owners, including data exposed to AI tools and assistants.
• Help select, deploy, and tune DLP controls across endpoint, email, web, and SaaS channels, using data classification results to inform policy.
• Partner with infrastructure and the Security Architect to review and improve encryption, tokenization, masking, and key management for data at rest and in transit.
• Enforce least-privilege access to sensitive data and secure cloud data platforms through access reviews, guardrails, and remediation.
• Triage data detection and response alerts and build alerting for anomalous data access and exfiltration with the Security Operations Center.
• Participate in data exposure incident response as a responder, subject matter expert, and/or liaison to technology, legal, and business teams.
• Develop data security standards, procedures, runbooks, and automations; support compliance efforts; and share data security knowledge with Security Analysts.

Benefits

• Fully subsidized Life Time membership
• Discounts on Life Time products and services
• 401(k) retirement savings plan with company discretionary match for team members age 21 and older
• Training and professional development
• Paid sick leave where required by law
• Medical, dental, vision, and prescription drug coverage for eligible full-time team members
• Short-term and long-term disability insurance
• Life insurance
• Pre-tax flexible spending and dependent care plans
• Parental leave and adoption assistance
• Paid time off, including 5 to 20 vacation days per calendar year based on tenure, and paid sick leave
• Deferred compensation plan for team members who meet the required income threshold

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level