Apex Systems
## Job Description# Senior Data EngineerWe are seeking a **Data Security Specialist** with deep expertise in **Snowflake security** to join our growing data platform team. This role is responsible for designing, implementing, and maintaining robust data security controls that safeguard sensitive data across our Snowflake environment and integrated tools. You will collaborate with data engineers, architects, governance, and privacy teams to ensure the platform meets all required security criteria, aligns with compliance needs, and supports secure adoption of AI/ML workloads.* Design, implement, and manage Snowflake security controls, including **RBAC**, **data masking**, **row/column-level security**, and **object tagging** for access governance.* Define and enforce **least-privilege access models** aligned with business requirements, compliance needs, and governance policies.* Advise on Snowflake configuration best practices (network policies, encryption, failover, account/warehouse management, access patterns) to protect sensitive and regulated data.* Partner with engineering teams to secure **AI/ML workloads**, **vector databases**, **embeddings**, and **Cortex AI features** within Snowflake.* Liaise with the Disney Security team to ensure the platform meets enterprise-wide security standards and audit requirements.* Analyze assessment findings, document risks, and collaborate with vendors on mitigation plans and timelines.* **5+ years of experience** in data security roles.* Strong **security-focused background**.* **Hands-on Snowflake expertise** (security model, RBAC, encryption, monitoring).* Certifications such as **SnowPro Advanced: Data Protection and Security**, **CISSP**, **CISM**, or **CCSK**.* Knowledge of **data lineage, cataloging, and classification tools** (e.g., Alation, BigID).* Experience in **large-scale enterprise or regulated industries** (media, finance, healthcare).* Familiarity with **agile/scrum methodologies** and collaborative ways of working.- Experience with **Immuta**, **SecuPi**, or other data access governance tools.
#J-18808-Ljbffr