Senior Data Security Engineer

What you'll do

• Engineer enterprise DLP controls across endpoint, email, SaaS, cloud storage, and network channels.
• Transition manual DLP policy deployments to automated, version-controlled Policy-as-Code workflows.
• Build CI/CD pipelines for data protection policy lifecycle management including testing, approval, and rollback.
• Develop reusable policy templates, detection logic, and configuration baselines across DLP and CASB platforms.
• Automate operational tasks such as configuration drift detection, alert enrichment, and recurring health checks.
• Integrate DLP and CASB with SIEM, SOAR, and identity platforms to improve visibility and enforcement.
• Tune detection logic using data-driven analysis to reduce false positives and improve signal quality.
• Define and maintain KPIs and dashboards to demonstrate risk reduction and operational maturity.

What we're looking for

• 4+ years of experience delivering enterprise Data Protection, Information Protection, Cloud Security, or Security Engineering capabilities.
• Proven experience in Policy-as-Code, Security-as-Code, and DevSecOps methodologies to automate security control deployment.
• Track record of replacing manual processes with engineering-driven solutions using APIs, Infrastructure-as-Code, and platform engineering.
• Advanced knowledge of Data Loss Prevention (DLP), data classification, information protection, and data governance principles.
• Hands-on expertise with Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, and the Microsoft 365 security ecosystem.
• Proficiency in scripting and automation tools including PowerShell, Python, REST APIs, Terraform, Bicep, YAML, or JSON.
• Comprehensive understanding of cloud, SaaS, CASB, and enterprise data protection architectures.
• Knowledge of regulatory, privacy, and compliance requirements and their implementation through scalable technical controls.