Senior Data Security Engineer

Data Security Execution (Primary)

• Define and maintain data security reference architectures and control patterns focused on:
  • Applicationmediated data access
  • API exposure and servicetoservice data flows
  • Automation orchestration and machinedriven access AI/ML workloads etc.
• Define and monitor data security capability maturity across structured unstructured and applicationcentric domains aligned to the enterprise cybersecurity taxonomy.
• Translate architectural intent into implementable standards and technical design criteria that engineering teams can execute without ambiguity.
• Define & maintain enterprise data classification labeling & protection standards across structured & unstructured data.
• Participate in architecture reviews & modernization initiatives to ensure secure data handling requirements are incorporated into application cloud analytics integrations & automation solutions

Data Exposure Reduction & Control Engineering

• Lead technical efforts to identify and reduce existing data exposure with emphasis on:
  • Access path patterns and permissions across SaaS cloud service third-party integrations and business applications
  • Application and API data flow monitoring
  • Data protection capabilities supporting classification monitoring access governance & data loss prevention requirements
• Design and implement controls that operate at execution points including:
  • Data access monitoring tied to application context
  • Enforcement patterns beyond static DLP or perimeter controls

Secure Enablement of Analytics and AI

• Serve as the technical advisor for securing data used in analytics automation and AI initiatives.
• Collaborate with peer IT and business teams to embed security controls into data pipelines feature stores and model interaction layers.
• Explicitly sequence AIrelated security work to avoid increasing risk through premature enablement.

Selective Cloud Security Engineering Support (Secondary)

• Provide targeted cloud security engineering support where it directly impacts data exposure including cloud storage data platforms SaaS and identitydriven data access patterns.
• Collaborate with technical peers on generalized cloud posture management particularly where it directly reduces data risk.

Operationalization & Incident Readiness

• Define datacentric detection and response patterns to improve monitoring.
• Partner with SOC and Engineering teams to ensure response workflows are realistic tested and actionable.

Role Relationships & Boundaries

• Cybersecurity Architect: Peer relationship. Joint ownership of architecture coherence; this role owns data security execution detail while the Architect owns enterprisewide alignment.
• Data Governance & Privacy: Consumers of intent and constraints; this role owns how those constraints are enforced in production.
• Cloud & Application Engineering: Execution partners; this role defines what secure means in practice and helps teams implement it.

Special assignments or tasks assigned to the employee by their supervisor as determined from timeto time in their sole and complete discretion.

A minimum of 8 years in cybersecurity or security engineering with deep handson experience in data security or application security is required.

Experience:

A minimum of 8 years in cybersecurity or security engineering with deep handson experience in data security or application security is required.

Education Level:

A minimum bachelors degree in information technology Cybersecurity Computer Science or a related field is required.

Required Skills:

• Proven ability to design and operationalize security controls not just select tools
• Proven ability to implement optimal security controls for AI-driven data access paths and automation systems that balance risk reduction vs innovation enablement
• Proven ability to secure data hosted on-premises in the Cloud and in SaaS environment
• Strong understanding of:
• Application and API security
• Identitybased access models
• Data access monitoring and enforcement
• Ability to operate comfortably in ambiguous environments and establish clarity through execution
• Demonstrates ability to collaborate across cross-functional teams and business units to deliver solutions
• Builds strong working relationships and fosters open communication and mutual accountability
• Facilitates alignment between business IT and external partners through consultative engagement
• Actively contributes to team discussions decision-making and problem-solving activities
• Ability to influence stakeholders across business and IT to gain agreement on ideas strategies and initiatives

Preferred Skills:

• Experience designing security for data platforms analytics or AIadjacent systems
• Background in cloudnative application architectures
• Experience with Snowflake Azure Purview MS SQL and endpoint security
• Prior experience acting as a firstofkind or foundational security role

Office based with travel up to 40% by land or air is required. Driver based environment. Subject to all weather and varying road conditions.

HF Sinclair Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin age disability veteran status or any other prohibited ground of discrimination.