Data Loss Prevention Engineer III

"I can be myself at work."

You are more than a job title. We want you to feel comfortable doing great work and bringing your best, authentic self to everything you do. We value your talents, traditions, and uniqueness-and we're committed to fostering a strong sense of belonging in a respectful workplace.

We intentionally seek diverse perspectives, experiences, and backgrounds, investing in a culture designed to celebrate differences. We believe that belonging leads to better outcomes and a stronger community of associates united by our mission. At Capital, we live our core values every day:
Integrity, Client Focus, Diverse Perspectives, Long-Term Thinking, and Community.

"I can influence my income."

You want to feel recognized r performance will be reviewed annually, and your compensation will be designed to motivate and reward the value that you provide. You'll receive a competitive salary, bonuses and benefits. Your company-funded retirement contribution will factor in salary and variable pay, including bonuses.

"I can lead a full life."

You bring unique goals and interests to your job and your life. Whether you're raising a family, you're passionate about where you volunteer, or you want to explore different career paths, we'll give you the resources that can set you up for success.

• Enjoy generous time-away and health benefits from day one, with the opportunity for flexible work options
• Receive 2-for-1 matching gifts for your charitable contributions and the opportunity to secure annual grants for the organizations you love
• Access on-demand professional development resources that allow you to hone existing skills and learn new ones

As a Security Engineer III in Data Loss Prevention, you'll take the lead in deploying, managing, and fine-tuning data loss prevention (DLP) and data protection tools across our enterprise systems. Your mission is to keep sensitive information safe by implementing strong technical controls, optimizing DLP policies to cut down false positives, and ensuring compliance with regulations like GDPR and HIPAA.

You’ll dive into threat modeling, fix vulnerabilities, and automate security configurations using scripting and infrastructure-as-code tools. A solid background in cloud, network, and application security is key, along with hands‑on experience with DLP platforms such as Symantec, Microsoft Purview, or Zscaler.

This role gives you autonomy while working closely with IT, Dev Ops, and compliance teams to embed security into everyday workflows. You’ll also mentor junior engineers, support incident response, and translate technical risks into clear, actionable guidance for stakeholders.

• You are responsible for deploying, configuring, and maintaining enterprise Data Loss Prevention (DLP) platforms to safeguard sensitive information across cloud, web, endpoint, and email channels.
• You create and tune DLP policies to detect and prevent unauthorized data exfiltration.
• You automate security controls using scripting and infrastructure-as-code, ensuring alignment with regulatory and internal standards.
• You ensure the health and operational stability of the DLP platform by monitoring performance, troubleshooting issues, and executing standard operational procedures to maintain reliability and effectiveness.
• You support incident response efforts and collaborate closely with incident response and threat detection teams to continuously improve DLP operations.
• You tune policies based on real-world detection patterns, enrich alert workflows with contextual data, and refine playbooks to reduce false positives.

• Minimum 3-5 years in data protection or in Information Security
• A Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• You have demonstrated proficiency with DLP tools and technologies such as Symantec, Microsoft, Zscaler, or Palo Alto DLP platforms.
• You possess in-depth knowledge of data protection methods, including encryption (for data at rest and in transit), data masking, and tokenization…