Staff Engineer II, Cyber - DLP Solution Engineer

Job Title

Staff Engineer II, Cyber - DLP Solution Engineer

Block 23

As a Staff Engineer II – Cyber (DLP Solution Engineer), you’ll work both independently and as part of a cohesive team to design, implement, and guide enterprise data protection and data loss prevention (DLP) capabilities. This principal-level individual contributor role is responsible for assisting with the setting of technical direction for DLP tooling, detection strategy, control validation, and long-term operational resilience across endpoints, network, cloud, collaboration, and SaaS environments.

You’ll take ownership to communicate, collaborate, and justify cybersecurity recommendations to a broad base of stakeholders across IT, Cyber, Risk, Audit, Privacy, Legal, Compliance, HR, and business functions. This role operates with broad autonomy and is expected to think systemically, not tactically, while remaining technically credible and hands-on for critical initiatives involving data loss prevention controls, policy implementation, and risk reduction options.

Western Alliance Bank’s Insider Risk and Data Loss Prevention program is a strategic capability within the Information Security function, supporting the bank’s continued growth as a Large Financial Institution. It focuses on identifying, preventing, and managing risks related to the unauthorized access, movement, or exposure of sensitive data. In this role, you will act as a technical subject matter expert and control owner responsible for defining DLP strategy, policies, detection logic, control frameworks, and implementation guidance.

This role requires deep working knowledge of DLP technologies and configurations to effectively design controls, guide implementation performed by engineering and operations teams, validate control effectiveness, and ensure technical outcomes remain aligned with business risk tolerance and regulatory expectations. You’ll partner closely with Data Security, Insider Risk, Security Monitoring, Privacy, Legal, HR, Infrastructure, and vendor teams to mature the bank’s data protection capabilities and maintain scalable, resilient solutions.

• Define and evolve enterprise Data Loss Prevention (DLP) and data protection strategies across endpoint, network, email, cloud, collaboration, and SaaS environments.
• Assist in the setting of technical direction for DLP tooling, detection philosophy, control coverage, and implementation standards.
• Design and document DLP policies, detection logic, control frameworks, escalation criteria, and technical requirements aligned with business risk tolerance and regulatory expectations.
• Serve as a technical authority on DLP tools, including Broadcom/Symantec DLP, Microsoft Purview DLP, Varonis, data discovery/classification platforms, and related technologies.
• Assist in guiding engineering and operations teams responsible for hands‑on platform administration to ensure DLP controls are implemented accurately, consistently, and in accordance with approved design intent.
• Lead engineering design for enterprise-scale DLP detections, policy implementation patterns, data protection workflows, testing approaches, and control validation activities.
• Assist in guiding DLP tooling strategy, including vendor capability assessment, configuration standards, integration opportunities, cost efficiency, lifecycle planning, and scalability considerations.
• Drive detection quality, coverage mapping, false‑positive reduction, policy tuning, and control effectiveness validation across DLP and data protection capabilities.
• Partner to enhance data classification, labeling, protection, and policy enforcement capabilities across structured and unstructured data sources.
• Collaborate with Insider Risk, Security Monitoring,…