Data Security Engineer

Data Security Specialist/Engineer - Snowflake

We are seeking a Data Security Specialist with deep expertise in Snowflake security to join our growing data platform team. This role is responsible for designing, implementing, and maintaining robust data security controls that safeguard sensitive data across our Snowflake environment and integrated tools.

You will collaborate closely with Disney Content Security team, data engineers, architects, governance, and privacy teams to ensure the platform meets all required security criteria, aligns with compliance needs, and supports secure adoption of AI/ML workloads.

The ideal candidate has strong hands-on knowledge of Snowflake's security model, role-based access control, data masking, encryption, monitoring, and integration with enterprise identity and access management solutions. Beyond implementation, you will advise on Snowflake security configurations and best practices to proactively strengthen our data protection posture, including securing vector data, embeddings, and Snowflake Cortex features.

Key Responsibilities

• Design, implement, and manage Snowflake security controls, including RBAC, data masking, row/column-level security, and object tagging for access governance.
• Define and enforce least-privilege access models aligned with business requirements, compliance needs, and governance policies.
• Advise on Snowflake configuration best practices (network policies, encryption, failover, account/warehouse management, access patterns) to protect sensitive and regulated data.
• Partner with engineering teams to secure AI/ML workloads, vector databases, embeddings, and Cortex AI features within Snowflake.
• Liaise with the Disney Security team to ensure the platform meets enterprise-wide security standards and audit requirements.
• Analyze assessment findings, document risks, and collaborate with vendors on mitigation plans and timelines.

Requirements

• Bachelor's degree in Computer Science, Information Security, Data Engineering, or related field (or equivalent experience).
• 5+ years of experience in information security, with at least 2 years working directly with Snowflake.
• Strong understanding of Snowflake RBAC, masking policies, external tokens, object tagging, data classification, and access governance.
• Experience securing AI/ML pipelines, vector databases, embeddings, or Snowflake Cortex features.
• Familiarity with IAM platforms (Okta, Azure AD, Ping, etc.), SSO, MFA, and SCIM integration.
• Proficiency in SQL, Python (or another major programming language), and automation for security controls.
• Familiarity with data governance frameworks, privacy regulations, and compliance requirements.
• Experience with cloud platforms (AWS, GCP, Azure) and securing data warehouses in multi-cloud environments.
• Strong written and verbal communication, with the ability to explain complex security concepts to technical and non-technical stakeholders.

Preferred Qualifications

• Certifications such as SnowPro Advanced: Data Protection and Security, CISSP, CISM, or CCSK.
• Experience with Immuta, SecuPi, or other data access governance tools.
• Knowledge of data lineage, cataloging, and classification tools (e.g., Alation, BigID).
• Experience in large-scale enterprise or regulated industries (media, finance, healthcare, etc.).
• Familiarity with agile/scrum methodologies and collaborative ways of working.

The pay range for this position is $95.00 - $101.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms.

TEKsystems is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.