Sr Security Engineer - Data Loss Prevention; DLP

Join to apply for the Sr Security Engineer - Data Loss Prevention (DLP) role at UKG

1 day ago Be among the first 25 applicants

Join to apply for the Sr Security Engineer - Data Loss Prevention (DLP) role at UKG

Get AI-powered advice on this job and more exclusive features.

Company Overview

With 80,000 customers across 150 countries, UKG is the largest U.S.

-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on.

Company Overview

With 80,000 customers across 150 countries, UKG is the largest U.S.

-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on.

At UKG, you get more than just a job. You get to work with purpose. Our team of U Krewers are on a mission to inspire every organization to become a great place to work through our award-winning HR technology built for all.

Here, we know that you’re more than your work. That’s why our benefits help you thrive personally and professionally, from wellness programs and tuition reimbursement to U Choose — a customizable expense reimbursement program that can be used for more than 200+ needs that best suit you and your family, from student loan repayment, to childcare, to pet insurance. Our inclusive culture, active and engaged employee resource groups, and caring leaders value every voice and support you in doing the best work of your career.

If you’re passionate about our purpose — people —then we can’t wait to support whatever gives you purpose. We’re united by purpose, inspired by you.

At UKG, security is at the core of everything we do. We are seeking a Security Engineer with a focus on Data Loss Prevention (DLP) to join our team. This individual will design, implement, and maintain security solutions and controls that safeguard sensitive data across the enterprise. The role requires expertise in DLP technologies, cloud access security, and zero-trust principles, with a strong ability to integrate these into enterprise-wide security strategies.



Job Responsibilities

• Review, test, and implement security solutions related to:
• Data Loss Prevention (DLP):
  Microsoft Purview Information Protection, Conditional Access, policy configuration, monitoring, and incident response.
• Data Classification & Labeling:
  Define, implement, and maintain enterprise-wide data classification and labeling standards; leverage AI/ML-driven solutions to automatically classify and tag sensitive information.
• CASB Solutions:
  Manage inline (proxy-based) and out-of-band (API-based) CASB models to control access to and usage of SaaS applications.
• ZTNA Solutions:
  Integration and operation of Zero Trust Network Access solutions (e.g., Zscaler, Prisma Access, Axis) with DLP enforcement.
• Email Security:
  Integrate DLP and data classification policies with enterprise email security platforms.
• Public Cloud Security:
  Apply DLP and CASB controls in AWS, Azure, and GCP environments.
• Develop, enforce, and continuously improve data protection policies and security baselines.
• Monitor DLP systems for policy violations, anomalous activity, and potential data exfiltration; investigate incidents and drive remediation.
• Recommend enhancements to improve visibility and effectiveness of data classification, labeling, and protection capabilities.
• Maintain documentation of configurations, security policies, and operational procedures.
• Automate manual security tasks and policy enforcement where possible (infrastructure as code, scripting, orchestration).

• Strong understanding of data security principles, data classification, and labeling frameworks.
• Hands-on experience with enterprise DLP platforms (Microsoft Purview strongly preferred).
• Experience with AI-driven data classification solutions and integration into security workflows.
• Familiarity with CASB deployment models (inline and out-of-band)…