Principal Data Security Engineer

Data Security Engineer - Job Description 

Overview 

We are seeking a highly skilled and motivated Data Security Engineer specializing in Data Loss Prevention (DLP) to join our dynamic team. This role is crucial in ensuring the protection of sensitive information and mitigating risks associated with data breaches. The ideal candidate will have a strong background in data security, a deep understanding of DLP technologies, and a proactive approach to identifying and addressing potential threats. 

Key Responsibilities 

• Implement and Manage DLP Solutions: Deploy, configure, and maintain DLP technologies to safeguard sensitive data across the organization. 

• Policy Development: Develop, refine, and enforce DLP policies and procedures to prevent unauthorized data access and exfiltration. 

• Response: Investigate and respond to data loss events working closely with Insider Threat and the SOC, ensuring timely resolution and documentation of findings. 

• Risk Assessment: Conduct regular risk assessments to identify vulnerabilities and implement appropriate countermeasures. 

• Collaboration: Work closely with IT, Cybersecurity, Legal and Compliance teams to align DLP initiatives with organizational goals. 

• Training and Awareness: Provide training and support to employees on data protection best practices and DLP policies. 

• Data Governance: Implement and maintain data governance policies and practices to ensure data integrity, availability, and security are upheld across the organization. 

• Data Classification: Develop and manage a data classification framework to appropriately categorize data based on sensitivity and criticality. 

• Compliance Monitoring: Ensure adherence to data governance regulations and standards, and regularly audit data management practices for compliance. 

• Data Mapping: Ensure an evergreen data map by utilizing scanning technologies and working with key partners in Privacy and Legal. 

• Primary Engineer for OneTrust Data Discovery: Serve as the lead engineer for the OneTrust Data Discovery product, overseeing its internal implementation, configuration, and maintenance to ensure comprehensive data discovery and protection. 

• eDiscovery and Litigation Holds: Manage eDiscovery processes and implement litigation holds to ensure the preservation and retrieval of electronic data for legal and regulatory requirements. 

• Data Encryption: Implement and manage encryption technologies to protect sensitive data in transit and at rest, ensuring compliance with industry standards and best practices. 

• Encryption Key Management: Develop and maintain robust encryption key management processes, including key generation, distribution, storage, rotation, and revocation. 

• Security Protocols: Design and implement secure communication protocols to protect data integrity and confidentiality during transmission. 

• Reporting: Generate reports on Data Security activities, DLP events, and trends for management review. 

Qualifications 

• Education: Bachelor’s degree in Computer Science, Information Security, or a related field. Advanced degrees or certifications (e.g., CISSP, CISM) are a plus. 

• Experience: Minimum of 5-8 years of experience in Cybersecurity with a dedicated 3-5 years of experience in data security, with a focus on Data Loss Prevention and encryption technologies. 

• Technical Skills: Proficiency in DLP technologies (e.g., Proofpoint, Palo Alto Prisma Access, Microsoft Purview, Symantec DLP, McAfee DLP, Forcepoint DLP), encryption tools (e.g., OpenSSL, PGP), scanning tools (e.g., Wiz.io, OneTrust Data Discovery, Microsoft Purview, eDiscovery), and a strong understanding of data security principles. 

• Analytical Skills: Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions. 

• Communication Skills: Excellent written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders. 

• Attention to Detail: High level of attention to detail and accuracy in managing data security processes. 

• Team Player: Ability to work effectively in a collaborative team environment. 

Preferred Qualifications 

• Enhanced experience with cloud-based DLP solutions and data protection strategies. 

• OneTrust platform experience. 

• Knowledge of regulatory requirements and compliance standards related to data security (e.g., GDPR, HIPAA). 

• Experience in conducting security audits and assessments.