Data Security Engineer

The Life Time Technology team is at the forefront of the evolution of Life Time into a digital-first company, transforming existing experiences and creating brand new ones both online and in our clubs. If you enjoy a fast-paced environment with the latest technologies and have a passion for health and fitness – we should meet. Work is a team effort, and we are a highly motivated, highly collaborative team; we always win or lose together. We invest in our team members and ensure they have the tools and opportunities to learn, grow and thrive. We offer an incredible benefits package, generous club discounts, and a fully subsidized Signature Life Time Membership. Want to Love Your Life? Join our team. Position Summary As a Data Security Engineer at Life Time, you will protect the information our members, vendors, and employees trust us with, from member records across our clubs to payment and health data. You are the Security team’s subject matter expert for data protection. Your primary goal is to protect Life Time’s data from unauthorized access, misuse, and loss, whether the threat is internal or external. You run our data security posture management (DSPM) platform, turn its findings into fixes with data owners, and partner with data, engineering, privacy, legal, and compliance teams to secure sensitive data across our on-premises, cloud, and SaaS environments. When a data incident happens, you help us respond quickly and thoroughly. You also advocate for secure data handling practices across the company. Working with the Security Architect, you will help shape our data loss prevention program as we select and roll out enforcement tooling, and help the business adopt AI tools and assistants without oversharing sensitive data. This role suits someone who enjoys hands-on engineering, can explain technical risk in plain language, and wants to see their work measurably reduce exposure. Job Duties and Responsibilities Partner with technology, data, and analytics teams to build data protection and privacy by design into new systems, data pipelines, and products Operate and tune our DSPM platform to discover and classify sensitive data (PII, payment card data, health information, and confidential business data) across cloud, SaaS, and on-premises environments Drive remediation of overexposed, misclassified, and abandoned data with data owners, including data exposed to AI tools and assistants Help select, deploy, and tune data loss prevention (DLP) controls across endpoint, email, web, and SaaS channels, using data classification results to drive policy Partner with infrastructure and the Security Architect to review and improve encryption, tokenization, masking, and key management for data at rest and in transit Enforce least-privilege access to sensitive data and secure cloud data platforms through access reviews, guardrails, and remediation Triage data detection and response alerts and build alerting for anomalous data access and exfiltration with our Security Operations Center Participate in incident response involving data exposure as a responder, subject matter expert, and/or liaison to technology, legal, and business teams Develop data security standards, procedures, runbooks, and automations, support compliance efforts (e.g., PCI DSS, HIPAA for applicable business units, state privacy laws), and share data security knowledge with Security Analysts Position Requirements Bachelor’s Degree in Computer Science, Information Security, or related field or equivalent combination of education and experience 3+ years of experience in cybersecurity or a similar role, including at least 2 years focused on data security or data protection Extensive understanding of modern data security concepts and privacy-by-design principles Deep understanding of one or more security or privacy frameworks (NIST CSF, NIST Privacy Framework, CIS, etc.) and how to incorporate them Hands-on experience with at least two of the following: DSPM, data classification, DLP, or data access governance tools Working knowledge of encryption, tokenization, and key management concepts (PKI, cloud KMS) Experience securing data in public cloud, cloud data warehouse, and SaaS productivity environments Familiarity with PCI DSS, HIPAA, and U.S. state privacy laws (e.g., CCPA/CPRA) Familiarity with SIEM and logging platforms, SQL, and scripting (Python, PowerShell, or similar) Excellent customer service, communication, and documentation skills Pay This is a salaried position starting at $94,000.00(or applicable minimum salary, if higher) and pays up to $129,000.00, based on experience and qualifications. Benefits All team members receive the following benefits while working for Life Time: A fully subsidized membership Discounts on Life Time products and services 401(k) retirement savings plan with company discretionary match (21 years of age and older) Training and professional development Paid sick leave where required by law Full-time Team Members are eligible for additional benefits, including: Medical, dental, vision, and prescription drug coverage Short term and long term disability insurance Life insurance Pre-tax flexible spending and dependent care plans Parental leave and adoption assistance Paid time off, including 5 to 20 vacation days per calendar year (based on tenure) and paid sick leave Deferred compensation plan, if the team member meets the required income threshold Life Time is a place for everyone. As an organization, we are committed to an inclusive, diverse and equitable workplace that respects and celebrates the unique contributions of each individual while ensuring we remain an equal opportunity employer that recruits, hires, trains and promotes based on merit and qualifications.