Data Protection Engineer

NASA Jet Propulsion Laboratory

2d • Onsite

About The Position

New ideas are all around us, but only a few will change the world. That’s our focus at JPL. We ask the biggest questions, then search the universe for answers—literally. We build upon ideas that have guided generations, then share our discoveries to inspire generations to come. Your mission—your opportunity—is to seek out the answers that bring us one step closer. If you’re driven to discover, create, and inspire something that lasts a lifetime and beyond, you’re ready for JPL. Located in Pasadena, California, JPL has a campus-like environment situated on 177 acres in the foothills of the San Gabriel Mountains and offers a work environment unlike any other: we inspire passion, foster innovation, build collaboration, and reward excellence. As a Senior Data Protection Engineer within JPL’s Governance, Risk, and Compliance (GR&C) team, you will develop and maintain the cybersecurity requirements framework for JPL’s missions and business operations. You will support the JPL Privacy Manager and Controlled Unclassified Information (CUI) Liaison, overseeing the lifecycle of sensitive data and ensuring alignment with NASA, federal, and international regulations.

Requirements

• Typically requires a Bachelor degree in computer science, computer engineering, software engineering, physics/math, or similar discipline with a minimum of 9 years of cybersecurity experience; Master degree in similar discipline with a minimum of 7 years of cybersecurity experience; or PhD in similar disciplines with a minimum of 5 years cybersecurity experience.
• Mastery of NIST RMF, privacy frameworks (GDPR/CCPA), and the system development lifecycle (SDLC).
• Significant experience in aerospace, ground data systems, or cloud-based mission environments.
• Proficiency with Splunk, Nessus, DLP tools, and GR&C platforms (e.g., RSA Archer).

Nice To Haves

• Current CISSP, CIPP/US (Certified Information Privacy Professional), CISM, or CGEIT desired.

Responsibilities

• Strategy & Policy: Develop and maintain JPL’s cybersecurity requirements framework and policies to support mission-critical functions.
• Privacy & Data Protection: Provide oversight for sensitive data in support of JPL’s designated Privacy Manager and CUI Liaison; guide strategies for Data Loss Prevention (DLP), encryption, and "Privacy by Design."
• Risk Management: Conduct comprehensive risk assessments across information and operational technology (IT/OT) systems, supply chains, acquisitions, and external subcontracts.
• Compliance & Frameworks: Ensure institutional alignment with standards such as NIST 800-53, GDPR/CCPA, and CMMC; manage data mapping, classification, and ethical data usage.
• Cross-Functional Leadership: Translate complex regulatory requirements into technical architectures by collaborating with legal, information technology, and mission leads.
• Incident & Audit Support: Lead investigations into data breaches/disclosures and provide subject matter expertise for internal and external audits.

Benefits

• JPL has a catalog of benefits and perks that span from the traditional to the unique. This includes a variety of health, dental, vision, wellbeing, and retirement plans, paid time off, learning, rideshare, childcare, flexible schedule, parental leave and many more.
• Our focus is on work-life balance, and living healthy, fulfilling lives as we Dare Mighty Things Together.
• For benefits eligible positions, benefits are effective the first day of the month coincident with or immediately following the employee’s start date.
• For further benefits information click Benefits and Perks

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees