[Hiring] Senior Security Engineer (Data Security) @Aya Healthcare

Role Description

We are seeking a Senior Security Engineer I – Data Security to join Aya’s Security Engineering team. This senior individual contributor role focuses on designing, implementing, and operating scalable data security and governance controls across Aya’s cloud analytics and data platforms, with a strong emphasis on Azure, Microsoft Purview, and Databricks.

In this role, you will:

• Partner closely with data engineering, platform, analytics, and compliance teams to protect sensitive data throughout its lifecycle - ingestion, processing, storage, analytics, and sharing.
• Lead hands-on technical work while also owning end‑to‑end delivery of data security initiatives.
• Help mature Aya’s data security posture in alignment with regulatory, privacy, and business requirements.
• Directly shape how sensitive data is protected, governed, and used responsibly at scale.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 5+ years of experience in security engineering, with strong emphasis on data security in cloud environments.
• Deep hands-on experience with Azure, including PaaS and data services (ADLS Gen2, Azure SQL, Synapse, Storage Accounts).
• Practical experience with Microsoft Purview for data governance, classification, lineage, and entitlement insights.
• Hands-on experience securing Databricks environments, including workspace security, cluster policies, secrets management, and data access controls.
• Strong proficiency with Terraform and infrastructure-as-code, including secure patterns and policy enforcement.
• Experience with identity and access management (Entra ID, managed identities), networking (private endpoints, firewalls), and encryption.
• Proficiency in scripting or automation using Python, PowerShell, or similar languages.
• Strong understanding of data protection principles, privacy-by-design, and common regulatory frameworks.

Requirements

• Lead the design, implementation, and ongoing improvement of data security controls across Azure data services and Databricks environments.
• Implement and operationalize Microsoft Purview capabilities such as data discovery, classification, sensitivity labeling, lineage, cataloging, and access insights.
• Define and enforce least-privilege access models for data platforms using Azure RBAC, Entra ID, managed identities, service principals, and Databricks workspace permissions.
• Perform in-depth security reviews of Azure data architectures.
• Assess and remediate data-related risks in infrastructure-as-code (Terraform), platform configurations, and CI/CD pipelines.
• Contribute secure-by-design patterns and reusable templates for data platforms.
• Design and maintain data security monitoring and alerting.
• Support investigation and response for data security incidents.
• Own documentation, standards, and security guidelines for data platforms.
• Lead medium- to large-scope data security initiatives end-to-end.
• Mentor Security Engineers and partner engineers on data security best practices.
• Translate complex technical risks into clear business impact for engineering leaders and stakeholders.

Benefits

• Free premium medical, dental, life and vision insurance.
• Generous 401(k) match.
• Aya also offers other benefits to those that are eligible and where required by applicable law, including reimbursements and discretionary bonuses.
• Aya provides paid sick leave in accordance with all applicable state, federal, and local laws.
• Celebrations for hitting goals and rewarding ourselves.
• Company-sponsored virtual events, happy hours, and team-building activities.
• Unlimited DTO — we believe in time off!
• Virtual yoga, meditation, or boot camp classes offered daily.

Compensation

Aya reasonably anticipates the pay scale for this position to be an annual salary of $170,000 to $185,000. The pay scale for this position may vary if the applicant possesses experience outside of what Aya reasonably anticipates for this position. Bonuses are subject to the role and your manager’s discretion.