Data Protection & Investigations Engineer

Data Protection & Investigations Engineer Company Description

Arista Networks is an industry leader in data‑driven, client‑to‑cloud networking for large data center, campus and routing environments. We leverage cloud computing, artificial intelligence, and software‑defined networking to give our clients a competitive edge in an increasingly interconnected world, while anticipating and adapting to future challenges.

We are seeking a highly skilled and deeply technical Data Protection & Investigations Engineer to join our Cybersecurity team. This critical role safeguards our most sensitive data assets by operating and maturing the Data Loss Prevention (DLP) program and leading complex security investigations.

• Monitor and triage security alerts.
• Serve as the subject‑matter expert for the enterprise DLP platform, driving policy creation, detections, testing, tuning, and investigations.
• Collaborate with business units and data owners to define and implement robust data protection policies that balance security with operational efficiency.
• Respond to high‑priority DLP alerts, escalating findings appropriately while minimizing false positives.
• Evaluate and integrate new data protection technologies to enhance overall security posture.
• Lead deeply technical investigations into complex security events and potential data exfiltration scenarios.
• Utilize Endpoint Detection and Response (EDR) platforms, network telemetry, log analysis, and digital forensics to construct factual timelines and evidence packages.
• Analyze user behavior, data flows, and endpoint activity to identify patterns of risk and policy violations.
• Develop and execute investigation playbooks and procedures for consistency and defensibility.
• Serve as the primary technical liaison for investigations, collaborating closely with Legal, Human Resources, and the CISO to adhere to legal and privacy requirements.
• Prepare detailed, legally defensible investigation reports suitable for executive review and legal proceedings.
• Brief the CISO on high‑risk matters, data trends, and the overall health of the Data Protection program.
• Translate complex technical security issues into understandable business risks for non‑technical audiences.
• Manage KPIs and executive reporting for the security function.

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience.
• 5+ years of information security experience, including at least 3 years in security investigations, forensics or advanced threat analysis.
• Expert proficiency in operating, administering, and investigating alerts from enterprise DLP solutions.
• Hands‑on experience with EDR tools, advanced querying and remote live response.
• Ability to handle sensitive, confidential information with absolute discretion.
• Strong knowledge of legal holds, chain‑of‑custody procedures, and eDiscovery processes.

• Exceptional critical thinking and analytical skills.
• Self‑starter who takes initiative and delivers results independently.
• Thrives in fast‑paced, high‑pressure remote work environments.
• Strong understanding of cybersecurity principles, threat landscapes, and attack vectors.
• High attention to detail and sound decision‑making under pressure.
• Commitment to continuous learning and professional development in cybersecurity.

• Experience writing and optimizing detections for security events.
• Knowledge of cloud security (GCP, AWS, Azure).
• Relevant industry certifications (e.g., CISSP, GCIA, GCIH, EnCE, GCFE).
• Experience with automation and artificial intelligence prompting.
• Familiarity with Data Privacy Regulations (GDPR, CCPA, HIPAA) and their impact on data protection policy.
• Experience with User Entity Behavior Analytics (UEBA) platforms.

Arista Networks is an equal‑opportunity employer. We make all hiring and employment‑related decisions in a non‑discriminatory manner without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or any other factor prohibited by applicable law. All information will be kept confidential according to EEO guidelines.

• Mid‑Senior level

• Full‑time

• Computer Networking Products