Translate architectural intent into implementable standards and technical design criteria that engineering teams can execute without ambiguity.
Define & maintain enterprise data classification, labeling & protection standards across structured & unstructured data.
Participate in architecture reviews & modernization initiatives to ensure secure data handling requirements are incorporated into application, cloud, analytics, integrations, & automation solutions
Data Exposure Reduction & Control Engineering
Lead technical efforts to identify and reduce existing data exposure, with emphasis on:
Access path patterns and permissions across SaaS, cloud service, third-party integrations, and business applications
Application and API data flow monitoring
Data protection capabilities supporting classification, monitoring, access governance, & data loss prevention requirements
Design and implement controls that operate at execution points, including:
Data access monitoring tied to application context
Enforcement patterns beyond static DLP or perimeter controls
Secure Enablement of Analytics and AI
Serve as the technical advisor for securing data used in analytics, automation, and AI initiatives.
Collaborate with peer IT and business teams to embed security controls into data pipelines, feature stores, and model interaction layers.
Explicitly sequence AI‑related security work to avoid increasing risk through premature enablement.
Selective Cloud Security Engineering Support (Secondary)
Provide targeted cloud security engineering support where it directly impacts data exposure, including cloud storage, data platforms, SaaS, and identity‑driven data access patterns.
Collaborate with technical peers on generalized cloud posture management, particularly where it directly reduces data risk.
Operationalization & Incident Readiness
Define data‑centric detection and response patterns to improve monitoring.
Partner with SOC and Engineering teams to ensure response workflows are realistic, tested, and actionable.
Role Relationships & Boundaries
Cybersecurity Architect: Peer relationship. Joint ownership of architecture coherence; this role owns data security execution detail, while the Architect owns enterprise‑wide alignment.
Data Governance & Privacy: Consumers of intent and constraints; this role owns how those constraints are enforced in production.
Cloud & Application Engineering: Execution partners; this role defines what “secure” means in practice and helps teams implement it.
Special assignments or tasks assigned to the employee by their supervisor, as determined from time to time in their sole and complete discretion.
Experience
A minimum of 8 years in cybersecurity or security engineering, with deep hands‑on experience in data security or application security is required.
Education Level
A minimum bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related field is required.
Required Skills
Experience
A minimum of 8 years in cybersecurity or security engineering, with deep hands‑on experience in data security or application security is required.
Education Level
A minimum bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related field is required.
Required Skills
Proven ability to design and operationalize security controls, not just select tools
Proven ability to implement optimal security controls for AI-driven data access paths and automation systems that balance risk reduction vs innovation enablement
Proven ability to secure data hosted on-premises, in the Cloud and in SaaS environment
Strong understanding of
Application and API security
Identity‑based access models
Data access monitoring and enforcement
Ability to operate comfortably in ambiguous environments and establish clarity through execution
Demonstrates ability to collaborate across cross-functional teams and business units to deliver solutions
Builds strong working relationships and fosters open communication and mutual accountability
Facilitates alignment between business, IT, and external partners through consultative engagement
Actively contributes to team discussions, decision-making, and problem-solving activities
Ability to influence stakeholders across business and IT to gain agreement on ideas, strategies, and initiatives
Preferred Skills
Experience designing security for data platforms, analytics, or AI‑adjacent systems
Background in cloud‑native application architectures
Experience with Snowflake, Azure, Purview, MS SQL and endpoint security
Prior experience acting as a first‑of‑kind or foundational security role
Supervisory/Managerial Responsibility
None.
Work Conditions
Office based with travel up to 40% by land or air is required. Driver based environment. Subject to all weather and varying road conditions.
Benefits
HF Sinclair offers a comprehensive benefits package designed to support the well-being of our employees and their families. Our benefits include, but are not limited to, the following:
Medical Insurance
Vision Insurance
Dental Insurance
Paid Time-Off
401(k) Retirement Plan with match
Educational Reimbursement
Parental Bonding Time
Employee Discounts
We are committed to fostering a supportive and inclusive work environment, ensuring our employees have the resources needed to thrive professionally and personally. Benefit eligibility is governed by official plan documents, for more details visit Total Rewards.
Our One HF Sinclair Culture
At HF Sinclair, we are united through our One HF Sinclair Culture, which is underpinned by our five core values of Safety, Integrity, Teamwork, Ownership and Inclusion. Developed to empower our people, our five core cultural values are at the heart of everything we do and extend to how we engage our stakeholders. These values influence our decisions, shape our behaviors and keep us connected across the entire organization. We maintain a true Safety culture for our employees, communities, environments and customers. Our goal is to make sure everyone returns home safely each day. We have a long-standing commitment to Integrity and ethical behavior and do what is right for our employees, investors, communities and the environment. We encourage employees to Step Up and Stand Out by championing a culture of Teamwork and Ownership. We foster a culture of Inclusion by encouraging diversity of experiences, viewpoints and backgrounds. What makes each of us different, together makes us stronger.
About HF Sinclair Corporation
HF Sinclair Corporation, headquartered in Dallas, Texas, is an independent energy company that produces and markets high-value light products such as gasoline, diesel fuel, jet fuel, renewable diesel and other specialty products. HF Sinclair owns and operates refineries located in Kansas, Oklahoma, New Mexico, Wyoming, Washington and Utah and markets its refined products principally in the Southwest U.S., the Rocky Mountains extending into the Pacific Northwest and in other neighboring Plains states. HF Sinclair supplies high-quality fuels to more than 1,500 branded stations and licenses the use of the Sinclair brand at more than 300 additional locations throughout the country. In addition, subsidiaries of HF Sinclair produce and market base oils and other specialized lubricants in the U.S., Canada and the Netherlands, and export products to more than 80 countries. Through its subsidiaries, HF Sinclair produces renewable diesel at two of its facilities in Wyoming and also at its facility in Artesia, New Mexico. HF Sinclair provides petroleum product and crude oil transportation, terminalling, storage and throughput services to its refineries and the petroleum industry.
Equal Opportunity Employer
HF Sinclair Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status or any other prohibited ground of discrimination.
Nearest Major Market: Dallas
Nearest Secondary Market: Fort Worth
Apply now »
Find similar jobs
Careers
Accessibility
EEO
Site Map
Privacy
Cookies
Modern Slavery Policy
Terms of Use
Opens in a new tab.
Opens in a new tab.
© Copyright 2022 HF Sinclair Corporation
