Security Engineer III​/DLP

Security Engineer III/DLP

PRIMARY PURPOSE :
The security engineer is responsible for implementing, maintaining, monitoring and managing secure solutions. The engineer delivers these solutions in accordance with the organization’s architectural designs, best practices, and regulatory or compliance requirements. As risks change, the security engineer is responsible for recommending modifications and enhancements to ensure the organization is evolving with the threat landscape.

The security engineer contributes to the corporate security strategy with security leadership and other senior security staffers and technologists. Recipients of the engineer’s implementations and management include IT infrastructure, application development, security operations, security audit and end users. With an emphasis on securing systems, applications, third-party connections, service providers and ancillary systems, the security engineer is responsible for securing business-to-business initiatives, third-party relationships, outsourced solutions and vendors.

Implements, monitors and manages secure solutions that address modern day issues.

We are seeking a highly skilled engineer responsible for designing, implementing, and managing Data Loss Prevention (DLP) and Microsoft Purview solutions to protect sensitive organizational data. This role includes developing and enforcing data protection policies, monitoring data activity across endpoints, cloud services, and on-premises environments, and ensuring compliance with regulatory and corporate requirements. The engineer will also be responsible for advancing Data Security Posture Management (DSPM) capabilities by identifying data risks, improving data visibility, classifying sensitive information, and strengthening overall data governance and security controls.

The ideal candidate will collaborate with cross-functional teams to continuously assess and enhance the organization’s data security posture, respond to incidents, and ensure alignment with evolving security standards and best practices.

• Handles daily implementation, monitoring and operational support of hardware, software, customer applications, managed solutions and service provider relationships.

• Engages in information security projects that evaluate existing security infrastructure and propose changes as defined by security leadership and architects. Additionally, deliver projects on time, within budget and in accordance with service level agreements (SLAs).

• Assists with incident response and system stability issues as they occur. This may include involvement outside of regular work hours, and responsiveness is expected.

• Works in tandem with architects, the security operations center (SOC), incident responders (in cases of anomalous activity and host compromise), and technology infrastructure and development team members.

• Manages service and escalation tickets within SLA expectations.

• Develops security test plans from architectural design. Identify deficiencies and make enhancements to ensure production is not impacted.

• Participates regularly in change project and change management meetings.

• Researches, validate and deploy solutions meeting security and business needs.

• Follows security engineering fundamentals and processes as outlined in NIST 800-160

• Influences the planning and execution of incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).

• Focus on driving security efficiencies, enabling security team members to work on more advanced tasks.

• Conducts performance testing to stress the limitations of security solutions while at the same time ensuring business innovation and day-to-day processes are not negatively impacted.

• Develops technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks

• Leads IT groups and business units as necessary in troubleshooting compatibility issues between security tools and business or productivity programs.

• Analyzes client and customer needs as required and provides clear and concise reports…