Senior Data Protection Engineer

Guild Mortgage•,

1d•$109,114 - $156,510•Onsite

About The Position

The Senior Data Protection Engineer is responsible for designing, implementing, and maintaining corporate data protection solutions that safeguard sensitive company and customer information. This role focuses on the hands-on configuration, operation, and continuous improvement of data protection technologies and controls across cloud, endpoint, email, and data platforms. The Senior Data Protection Engineer works closely with IT Security, Compliance, Legal, and business stakeholders to translate data protection requirements into practical technical controls. This position requires a strong understanding of data loss prevention, data classification, information protection, regulatory compliance, and emerging data security threats to ensure the confidentiality, integrity, and availability of regulated and sensitive data.

Requirements

A combination of education and experience may be considered in lieu of the Bachelor’s degree.
Degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).
Minimum five years experience in DLP engineering.
Strong, hands-on experience with Microsoft Purview (Data Loss Prevention and Information Protection) and Microsoft Defender.
Strong knowledge of encryption, data classification, network security, endpoint protection, and cloud security principles.
Solid understanding of regular expression and regex-based pattern matching.
Understanding data protection laws, compliance frameworks, and industry best practices.
Excellent verbal and written communication skills required.
Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required.
Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required.
Commitment to company values.
Customer Service - Proactive attention to each person.
Integrity - Do and say what's right.
Respect - Treat others with dignity.
Collaboration - Listen and work together.
Learning - Seek knowledge and strive for improvement.
Excellence – Deliver the unexpected.

Nice To Haves

Bachelors Degree directly related to the position or equivalent, preferred.
Experience with Microsoft Defender for Cloud and/or Zscaler is a plus.
Scripting (e.g., Python and PowerShell) and automation skills are a plus.

Responsibilities

Design, deploy, configure, and maintain data protection solutions across endpoints, networks, cloud services, email systems, and collaboration platforms.
Customize and fine-tune data protection policies, rules, and classifiers.
Define and maintain data classification schemes and sensitivity labels.
Fine-tune data protection policies, rules and detection algorithms to minimize false positives.
Define and refine data classification labels, configurations and control parameters.
Ability to troubleshoot sensitivity label issues with end users.
Develop automated workflows to enhance data security and reduce manual intervention.
Monitor and triage data protection alerts and incidents.
Implement and operate DSPM controls, data discovery, posture assessments, and exposure remediation.
Documentation of systems designs, configurations and support processes including, but not limited to, creating/maintaining conceptual, logic and system diagrams, standard operating procedures and playbooks, and configuration guides.
Ensure data protection policies align with company and regulatory requirements, as well as industry regulations (e.g., GLBA, CCPA).
Work closely with compliance and legal teams to enforce data protection requirements.
Provide technical guidance on emerging threats and data security trends.
Support data flow mapping, risk assessments, and remediation efforts.
Participate in architecture reviews and change management activities.
Integrate data protection platforms with SIEM and IAM systems.