Senior Data Security & Cryptography Specialist

We are looking for an experienced Senior Data Security & Cryptography Specialist to assess and strengthen data protection, encryption, key management, secrets management, and cryptographic controls across applications, databases, APIs, cloud platforms, and enterprise systems supporting a large-scale digital platform.

Qualifications

• Assess data security architecture and controls across applications, databases, APIs, integrations, cloud platforms, and infrastructure.
• Review protection of sensitive data at rest, in transit, and where applicable, in use.
• Assess implementation of encryption, hashing, tokenization, masking, and key-management controls.
• Review PKI, certificates, TLS configurations, cryptographic protocols, algorithms, and cipher suites.
• Assess Key Management Systems (KMS), Hardware Security Modules (HSM), and secrets-management solutions.
• Identify weak or outdated cryptographic implementations and recommend appropriate remediation.
• Review key lifecycle management, including generation, storage, distribution, rotation, revocation, backup, and destruction.
• Evaluate data-access controls and protection mechanisms for sensitive and regulated information.
• Support remediation and validate the effectiveness of implemented data-security and cryptographic controls.
• Prepare technical findings, risk assessments, remediation recommendations, and security documentation.

Required experience:

• 7+ years of relevant experience in Data Security, Cryptography, Information Security, or Security Engineering.
• Strong practical knowledge of:

Encryption and cryptographic controls

PKI and digital certificates

TLS/SSL

Key Management Systems

HSM

Secrets management

Tokenization and data masking

Data-at-rest and data-in-transit protection

• Understanding of cloud-native data protection and key-management services.
• Experience assessing cryptographic implementations and identifying weak algorithms, protocols, keys, or configurations.
• Strong understanding of data classification, sensitive-data protection, access controls, and security architecture.
• Strong technical documentation and reporting skills.
• Ability to communicate findings effectively to technical and non-technical stakeholders.