Data Security Engineer

Data Security Engineer – Richmond

Protecting sensitive enterprise data requires continuous visibility, governance, and enforcement across increasingly complex environments.

• Own day-to-day operation of data security platforms
• Perform onboarding of new data sources and maintain scanning coverage across environments
• Continuously tune classification rules and validation processes to improve accuracy
• Optimize DLP policies and enforcement mechanisms to balance protection and usability
• Identify overexposed, misclassified, or unprotected sensitive data and drive remediation
• Conduct analysis of data exposure risks and recommend mitigation strategies
• Validate effectiveness of data protection controls (e.g., DLP, encryption, labeling)
• Support data-related incident investigations and provide root cause analysis
• Work with application, data, cloud, and business teams to improve data protection outcomes
• Guide stakeholders on data classification, labeling, and handling best practices
• Participate in working groups and governance forums to align on data security strategy
• Coordinate with SOC, Identity, and Privacy teams for integrated security operations
• Identify opportunities to automate data discovery, classification, and response workflows
• Improve operational processes for onboarding, tuning, and governance
• Stay current on evolving risks (e.g., insider threat, data leakage, AI/data misuse)
• Contribute to improvements in enterprise data security strategy and roadmap
• Support adoption of new capabilities related to data security and privacy

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems
• 3+ years of experience in data security, cybersecurity, or related domain
• Hands‑on experience with at least one data security platform (e.g., BigID, Varonis, Spirion)
• Hands‑on experience with at least one DLP solution (e.g., Microsoft Purview, Forcepoint, Symantec)
• Strong understanding of data classification and governance principles
• Strong understanding of data protection techniques (DLP, encryption, tokenization)
• Strong understanding of security frameworks (NIST, ISO 27001, CIS)
• Experience working in enterprise IT environments (cloud, endpoint, SaaS)
• Familiarity with Linux and Kubernetes environments

• Competitive Compensation & Total Rewards
• Incentives
• Comprehensive Healthcare Coverage
• Multiple 401(k) Savings Plan Options and Auto Enrollment in Employer-Directed Retirement Account (100% employer-funded)
• Generous Paid Time Off – including 12 Paid Holidays, Volunteer Time Off, and Paid Family Leave
• Disability, Life, and Long Term Care Insurance
• Tuition Reimbursement, Student Loan Repayment, and Training & Certification Support
• Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)
• Caregiver and Mental Health Support Services

We are proud to be an equal opportunity employer and all hiring decisions are based on merit, qualifications, and business need. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.