Use dynamic data masking to mask the SSNs with a default mask, such as XXX-XX-XXXX.

Create a stored procedure that applies a custom mask to the SSNs when they are accessed.

Implement row-level security to restrict access to the SSNs based on the user's role.

Encrypt the entire table containing the SSNs at rest using Transparent Data Encryption (TDE).