Senior Cyber Database Engineer - Data Protection/DLP

Qbe•Haymarket, VA

2d•Hybrid

About The Position

QBE, LLC is seeking a Senior Cyber Database Engineer - Data Protection/DLP to engineer and support data protection, database security, and Data Loss Prevention capabilities for NIH/OD-OIT. This position is primarily remote but will require some TDY.

Requirements

Associate degree in cybersecurity, information technology, computer science, information systems, business, communications, or a related field, or an additional two or more years of relevant experience in place of the degree requirement.
At least 8 years of relevant experience aligned to the responsibilities of this position.
Experience implementing or operating DLP and data-security technologies.
Strong understanding of database security, access controls, encryption, and data protection.
Knowledge of privacy and sensitive-data handling requirements.
CompTIA Security+ certification.
Certified Information Privacy Professional (CIPP) certification.
Ability to obtain and maintain the required federal background investigation, Public Trust determination, or security clearance associated with the position.

Nice To Haves

Experience protecting PHI, PII, or sensitive research information.
Experience with cloud-based data protection and DLP technologies.
Federal privacy or security experience.

Responsibilities

Design, implement, configure, and maintain enterprise data protection and DLP technologies.
Develop controls for protecting sensitive information across endpoints, networks, cloud platforms, and data repositories.
Support database security monitoring and access-control requirements.
Develop and tune DLP policies, rules, and detection logic.
Investigate potential data leakage and policy violations.
Work with privacy, legal, security, and system stakeholders to define data-protection requirements.
Support classification and protection of sensitive data.
Evaluate database configurations and access for security risks.
Support integration of DLP and database security tools with SOC technologies.
Support incident response involving suspected unauthorized disclosure or data loss.