Data Protection Engineer
About The Position
The Data Protection Engineer is a member of the Data Protection team responsible for implementing, maintaining, and operationally supporting the organization’s data protection infrastructure and applications. The role participates in complex projects, troubleshoots incidents, and contributes to the development and improvement of data protection engineering policies, standards, and procedures. The Engineer works closely with senior engineers to implement and maintain data protection solutions and applies expertise in Microsoft Purview, ForcePoint, BigID, Varonis, Windows, Linux, GKE, encryption, and other data loss prevention (DLP) and data security posture management (DSPM) tools. The position implements and maintains data protection components across platforms and vendors, including DLP, DSPM, and data de-identification solutions. It collaborates on solution design and implementation in on-premises and cloud environments, including GCP, AWS, and Azure; configures data protection policies; investigates and resolves incidents; contributes to projects and documentation; and develops automation scripts. The role also involves collaborating with colleagues, keeping current with relevant technologies, best practices, and compliance requirements, and performing other assigned duties. The position is designated as office-based or remote, with a physical work site required occasionally. Travel is less than 25%.
Requirements
- Five years of experience with Data Loss Prevention.
- Five years of experience with Information Security and Systems Analysis.
- Five years of experience deploying and maintaining infrastructure for DLP software.
- Five years of experience creating and managing DLP policies.
- Bachelor’s degree in Information Security, Information Systems, Information Assurance, Computer Science, or a related field; alternatively, five years of experience in Information Security, Governance, Risk and/or Compliance, Information Technology, or Business Analysis, including at least three years of hands-on engineering experience.
- Ability to achieve stretch goals in a highly innovative and fast-paced environment.
- Ability to communicate and present to other technology groups and leaders.
- Strong teamwork and interpersonal skills.
- Familiarity with secure SDLC best practices.
- Strong sense of ownership, urgency, and drive.
- Knowledge of HITRUST CSF, NIST 800-83, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3.
- Knowledge of Kubernetes or other container orchestration technologies.
- Knowledge of GitLab or other version-control tools and processes.
Nice To Haves
- Three years of experience with at least two modern programming languages, such as Python, Java, JavaScript, BASH, or PowerShell.
- Three years of experience designing and providing architectural support for at least two of Google Cloud Platform, Amazon Web Services, or Azure.
- Master’s degree in Information Security, Information Systems, Information Assurance, Computer Science, or a related field.
- CISSP certification.
- Advanced certification in GCP, AWS, or Azure, such as Professional Cloud Architect or Security Engineer.
- Terraform or similar certification.
Responsibilities
- Implement and maintain data protection infrastructure components across platforms and vendors, ensuring performance and security; deploy and configure DLP, DSPM, and data de-identification solutions.
- Collaborate on the design and implementation of data protection solutions in on-premises and cloud environments, including GCP, AWS, and Azure.
- Configure and maintain data protection policies, including sensitive information types, detection parameters, and exception lists.
- Troubleshoot and resolve data protection incidents, conduct root cause analysis, and escalate complex issues for remediation.
- Contribute to data protection projects through testing, implementation, documentation, and project meeting participation.
- Develop and maintain automation scripts, such as PowerShell and Python, to improve efficiency and support deployment and maintenance of data protection software.
- Collaborate with team members to expand technical knowledge and expertise in data protection technologies.
- Stay current with data protection technologies, industry best practices, and evolving compliance requirements.
- Perform other duties as assigned or requested.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
