Data Security Engineer
Core
Design, operate, and govern enterprise data loss prevention (DLP) controls and data protection policies across endpoints, email, collaboration platforms, and cloud storage environments.
Role type
Senior Data Security Engineer (Data Loss Prevention)
Builds
Enterprise data protection policies, classification taxonomies, and automated remediation workflows for sensitive information.
Domain
Financial Services / Cloud Security / Data Governance
Required skills
Data Loss Prevention (DLP) platform administration, Data classification frameworks, Cloud security (SaaS/Object Storage), Database activity monitoring, PowerShell scripting, Python scripting, API integration, Secure Web Gateway management, Cloud Access Security Broker (CASB) configuration, Regulatory compliance (Financial Services), Incident response workflows, Least-privilege access governance.
Preferred skills
Experience with Microsoft Purview, Zscaler, Palo Alto Networks, Netskope, Box, SharePoint Online, OneDrive, Microsoft 365, Microsoft Graph API.
Technologies
Microsoft Purview, Zscaler, Palo Alto Networks, Netskope, Box, SharePoint Online, OneDrive, Microsoft 365, Microsoft Graph, PowerShell, Python.
Responsibilities
Design and operate enterprise DLP controls across endpoints, email, collaboration platforms, and cloud storage; Deploy data protection policies across various platforms; Build and maintain classification taxonomy, sensitivity labels, and trainable classifiers; Administer data access governance controls to identify overexposed data; Extend protection coverage to databases and SaaS applications; Integrate egress enforcement with secure web gateways and CASBs; Tune policies using telemetry to reduce false positives; Operate incident workflows for alert triage and escalation; Automate policy deployment and remediation through scripting; Maintain data protection standards and policy documentation.
Seniority
Senior, hands-on IC
