Security Engineer (DLP)

Benesch Law•Cleveland, OH

1d•$110,000 - $132,000•Hybrid

About The Position

At Benesch, we pride ourselves on exceeding expectations and building trust not only with our clients but with our employees, who are considered Benesch's #1 asset. The firm is committed to providing the highest level of legal service and fostering a positive work environment, consistently earning placement on Chicago and Cleveland's Top Workplaces lists and advancing on the AmLaw 150. Benesch is recognized for attracting and retaining top talent, offering a hybrid schedule, career development and growth, transparent leadership, and a culture that celebrates diversity, equity, and inclusion. A comprehensive benefits package is also provided. As one of the fastest-growing firms in the nation, Benesch has offices in Chicago, Columbus, San Francisco, New York City, and Wilmington, valuing the talent across all locations. Benesch is announcing an opening for a Security Engineer (DLP) in its Cleveland office. This position offers a hybrid schedule with work-from-home flexibility. The ideal candidate will have a passion for security engineering, thrive on enhancing cybersecurity postures with a strong emphasis on endpoint security, security engineering support, and project participation and guidance. The role involves building secure, resilient systems from the ground up, configuring firewalls, intrusion detection systems, and security tools, with solid experience in Netskope DLP. This opportunity is perfect for an individual looking to play a crucial role in Benesch's security initiatives, bringing technical expertise, risk-based prioritization, strategic thinking, and a collaborative spirit to drive security innovation and resilience.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, or related field.
5+ years of experience in security engineering across multiple disciplines including incident response, red, purple and blue team activities, endpoint controls.
Hands-on experience with DLP, CASB, and cloud-native security tools including Netskope DLP.
Solid understanding of cloud platforms (AWS, Azure, GCP) and associated security services.
Understanding and practical experience with incident response activities.
Familiarity with frameworks such as NIST CSF, MITRE ATT&CK, ISO 27001 and CIS Benchmarks and aligning the security program with the framework.

Nice To Haves

Master's degree
Relevant certifications (e.g., CISSP, CCSP, AWS Security Specialty, GIAC)
Experience with EDR, SIEM integration and DLP.
Strong analytical, communication, and project management skills.
Ability to mentor junior analysts and support cross-functional initiatives.

Responsibilities

Support end-to-end execution of diverse security projects including: Endpoint Detection & Response (EDR) deployments.
Ongoing vulnerability assessment and penetration testing activities.
Security automation and orchestration initiatives.
Hardening and baseline creation, implementation and auditing.
Identity & Access Management (IAM) enhancements.
Recommend, evaluate and implement new security technologies and tools.
Monitor and analyze security events using SIEM and other detection platforms.
Lead investigations and coordinate response efforts for security incidents.
Develop and maintain incident response runbooks and tabletop exercises.
Recommend, implement, and support SIEM and threat intelligence enhancements.
Lead deployment and tuning of DLP and CASB solutions to safeguard sensitive data across endpoints, cloud services, and email platforms.
Monitor and respond to data exfiltration attempts and policy violations.
Conduct regular reviews of data access and usage patterns to identify anomalies.
Assist with implementing and supporting secure cloud architectures across AWS, Azure, and/or GCP, identify risks and provide recommendations.
Enforce and audit cloud security policies, standards, and best practices.
Evaluating existing posture and providing risk-based recommendations for improvement.
Support internal and external audits, risk assessments, and compliance initiatives (e.g., NIST, ISO 27001, SOC 2).
Maintain documentation and key metrics for security controls and processes.
Collaborate with governance and risk teams to align technical controls with policy requirements.