Data Protection Security Engineer

ConAgra Foods•Omaha, NE

12h•$73,600 - $109,300•Hybrid

About The Position

Reporting to the Manager, Information Security, the Data Protection Security Engineer joins the Identity Management team to help build and operationalize the enterprise data protection program. The role focuses on identifying and classifying sensitive data, administering data protection technologies, implementing and tuning protection controls, and investigating potential data exposure. The engineer works with data owners, security teams, and technology partners to strengthen how sensitive information is identified, labeled, protected, monitored, and securely shared across cloud, on-premises, endpoint, email, and software-as-a-service environments. The position supports enterprise data protection platforms and controls, including data loss prevention, sensitivity labeling, encryption, secure sharing, retention, records management, and least-privilege safeguards. It also contributes to program documentation, platform improvements, metrics, reporting, runbooks, user guidance, automation, and emerging data-security capabilities for artificial intelligence. The role does not require work at or regular visits to manufacturing plants. It requires willingness to travel up to 10% and is hybrid, with three days in the office. The expected annual salary range is $73,600–$109,300. Actual salary depends on factors including location, relevant experience and skillset, and internal equity. Benefits, subject to location and role, include healthcare plans, a wellness incentive program, mental wellbeing support, fitness reimbursement, bonus incentive opportunity, matching 401(k), stock purchase plan, career development opportunities, employee resource groups, on-demand learning, tuition reimbursement, paid time off, parental leave, flexible work schedules, and volunteer opportunities.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or a related field, or equivalent professional experience.
Three or more years of enterprise technology experience, including at least two years in cybersecurity, data protection, data governance, or a related area.
Hands-on experience administering, configuring, or supporting an enterprise data protection or data loss prevention platform such as Microsoft Purview, Varonis, Proofpoint Data Loss Prevention, or comparable technology.
Experience with sensitive-data discovery, classification, sensitivity labeling, or related information protection controls.
Working knowledge of the data loss prevention policy lifecycle, including policy configuration, testing, tuning, alert investigation, exception handling, and remediation.
Working knowledge of data protection and governance concepts, including secure information sharing, retention, or records management.
Working knowledge of identity and access concepts, including least privilege and access-related data protection risks.
Strong troubleshooting, analytical, problem-solving, organizational, written, and verbal communication skills, including the ability to communicate technical risks and recommendations to technical and non-technical audiences.
Ability to work independently and collaboratively within a matrixed organization.
Willingness to travel up to 10%.

Nice To Haves

Hands-on Microsoft Purview experience.
Experience with Varonis, Proofpoint Data Loss Prevention, or other enterprise data discovery and protection technologies.
Experience protecting data across cloud, on-premises, endpoint, email, and software-as-a-service environments.
Experience supporting privileged access management, identity governance, or other identity-based security controls.
Experience with PowerShell, Python, REST APIs, connectors, workflow automation, or other security automation technologies.
Experience supporting insider-risk, data-exposure, or data-exfiltration investigations.
Familiarity with Zero Trust, National Institute of Standards and Technology, International Organization for Standardization 27001, or similar security frameworks.
Relevant certification in information security, data protection, cloud security, governance, or identity.
Exposure to data protection controls for artificial intelligence applications, agents, or other emerging artificial intelligence technologies.

Responsibilities

Administer and support enterprise data protection technologies, such as Microsoft Purview, Varonis, Proofpoint Data Loss Prevention, or comparable platforms.
Discover and classify sensitive data, and implement sensitivity labels, encryption, secure-sharing controls, and other information protection measures.
Configure, test, and tune data loss prevention policies to improve effectiveness, reduce false positives, and manage exceptions.
Monitor data protection alerts and investigate potential data exposure, inappropriate sharing, policy violations, or suspected data exfiltration; coordinate remediation and escalation as needed.
Partner with data owners and technology teams to identify sensitive information, understand how it is accessed and shared, and remediate oversharing or inappropriate access.
Translate business, privacy, legal, and data governance requirements into technical data protection controls.
Support retention, records management, and secure information-sharing requirements through data protection technologies and controls.
Apply least-privilege and identity-based safeguards to sensitive data in partnership with Identity and Access Management teams.
Support the continued development of the data protection program through documentation, platform improvements, metrics, reporting, runbooks, and user guidance.
Contribute to automation and emerging data protection capabilities, including artificial intelligence data-security controls.
Travel up to 10%.