Data Protection Security Engineer

Conagra Brands•Omaha, NE

2d•$73,600 - $109,300•Hybrid

About The Position

Reporting to the Manager, Information Security, the Data Protection Security Engineer joins the Identity Management team to help build and operationalize the enterprise data protection program. The role focuses on identifying and classifying sensitive data, administering data protection technologies, implementing and tuning protection controls, and investigating potential data exposure. The engineer works with data owners, security teams, and technology partners to improve how sensitive information is identified, labeled, protected, monitored, and securely shared across cloud, on-premises, endpoint, email, and software-as-a-service environments. The position supports enterprise data protection platforms and controls, translates business, privacy, legal, and data governance requirements into technical measures, and helps develop program documentation, metrics, reporting, runbooks, automation, and user guidance. The role may also contribute to data-security controls for artificial intelligence capabilities as the program evolves. The position is hybrid, with three days in the office, and requires willingness to travel up to 10%. It does not require work at or regular visits to manufacturing plants.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or a related field, or equivalent professional experience.
Three or more years of enterprise technology experience, including at least two years in cybersecurity, data protection, data governance, or a related area.
Hands-on experience administering, configuring, or supporting an enterprise data protection or data loss prevention platform such as Microsoft Purview, Varonis, Proofpoint Data Loss Prevention, or comparable technology.
Experience with sensitive-data discovery, classification, sensitivity labeling, or related information protection controls.
Working knowledge of the data loss prevention policy lifecycle, including policy configuration, testing, tuning, alert investigation, exception handling, and remediation.
Working knowledge of data protection and governance concepts, including secure information sharing, retention, or records management.
Working knowledge of identity and access concepts, including least privilege and access-related data protection risks.
Strong troubleshooting, analytical, problem-solving, organizational, written, and verbal communication skills, including the ability to communicate technical risks and recommendations to technical and non-technical audiences.
Ability to work independently and collaboratively within a matrixed organization.
Willingness to travel up to 10%.

Nice To Haves

Hands-on Microsoft Purview experience.
Experience with Varonis, Proofpoint Data Loss Prevention, or other enterprise data discovery and protection technologies.
Experience protecting data across cloud, on-premises, endpoint, email, and software-as-a-service environments.
Experience supporting privileged access management, identity governance, or other identity-based security controls.
Experience with PowerShell, Python, REST APIs, connectors, workflow automation, or other security automation technologies.
Experience supporting insider-risk, data-exposure, or data-exfiltration investigations.
Familiarity with Zero Trust, National Institute of Standards and Technology, International Organization for Standardization 27001, or similar security frameworks.
Relevant certification in information security, data protection, cloud security, governance, or identity.
Exposure to data protection controls for artificial intelligence applications, agents, or other emerging artificial intelligence technologies.

Responsibilities

Administer and support enterprise data protection technologies, including Microsoft Purview, Varonis, Proofpoint Data Loss Prevention, or comparable platforms.
Discover and classify sensitive data and implement sensitivity labels, encryption, secure-sharing controls, and other information protection measures.
Configure, test, and tune data loss prevention policies to improve effectiveness, reduce false positives, and manage exceptions.
Monitor data protection alerts and investigate potential data exposure, inappropriate sharing, policy violations, or suspected data exfiltration; coordinate remediation and escalation as needed.
Partner with data owners and technology teams to identify sensitive information, understand access and sharing practices, and remediate oversharing or inappropriate access.
Translate business, privacy, legal, and data governance requirements into technical data protection controls.
Support retention, records management, and secure information-sharing requirements through data protection technologies and controls.
Apply least-privilege and identity-based safeguards to sensitive data in partnership with Identity and Access Management teams.
Support continued development of the data protection program, including documentation, platform improvements, metrics, reporting, runbooks, and user guidance.
Contribute to automation and emerging data protection capabilities, including artificial intelligence data-security controls, as the program evolves.