DLP Security Engineer (Remote)

For further inquiries regarding the following opportunity, please contact our Talent Specialist Lavanya | 224-369-0873

• Title: DLP Security Engineer (Remote)
• Location: Remote 
• Duration: 12 months contract to hire

Summary of Responsibilities: The Data Loss Prevention (DLP) Engineer leads the first line of defense Information Security services around DLP security and related matters. They review, design, and develop security operational processes, standards, and procedures utilizing current and new technologies to improve security controls and business performance.  The DLP Security Engineer will coordinate with internal teams to implement data classification and data loss prevention solutions and improve security that is aligned with corporate business objectives and regulatory requirements.  

Primary Responsibilities

• Subject Matter Expertise – Lead the design, implementation, and maintenance of data loss prevention solutions to business areas, project teams, and vendors to apply and execute appropriate use of technology solutions and lead efforts to examine technology vision, opportunities, and challenges about security standards and the impact of the technology.
• Security Trends – Continually works to enhance breadth and depth of knowledge and experience. Monitors and anticipates trends and investigates organizational objectives and needs.
• Reporting – Create and maintain operational documentation and reports to support monthly trend analysis as well as project components.
• Vendor/Tool Selection – Leads the research, evaluation, proof-of-concept, selection, and implementation of technology solutions.  Provides detailed analysis of pros and cons and build vs buy options.
• Process Improvement – Promotes implementation of new technology, solutions, and methods to improve business processes, efficiency, effectiveness, and value delivered to customers. Analyze quality reviews of current solutions and provide technical guidance to improve overall security.
• Incident Response – Is involved in security incident response activities and post-event reviews of security incidents. 

Requirements

• 2+ years of operational experience is required; must have implemented and managed DLP platforms; must possess strong technical knowledge of DLP architecture, system policies, rules, etc
• Experience with creating Regular Expressions
• Knowledge of data classification solutions like Varonis, Big ID, Securti.AI
• Experience working with data loss prevention tools Symantec, McAfee, Force Point, Netskope, or other major platforms.
• Knowledge of cryptographic implementations at media, file, and application levels
• Experience with metadata management and data tagging and creating custom data analytics for data security.
• Strong verbal and written communication skills; must be able to effectively communicate technical details and thoughts in non-technical/general terminology to various levels of the organization.

Work Environment Characteristics

• Self-motivated and results-oriented, including the ability to prioritize conflicting demands.
• Exceptional organizational skills to balance work and lead projects.
• Demonstrable leadership and interpersonal skills with experience in mentoring team members 
• Strong initiative, consensus-building, and ability to collaborate directly and build strong relationships with a variety of internal and external stakeholders (business, development, compliance, etc.)
• Strong written communication (writing sample may be requested) and professional verbal communication skills, experienced facilitator, and presenter.
• Ability to adapt and apply information to new scenarios and technologies.

Certifications/Licensures

Preferences

• Bachelor’s degree in Information Security, Information Technology, Information Systems Management, Computer Science, Engineering, or related field(s) or equivalent demonstrated work experience.
• Base Technology or Security certification (CISSP, CompTIA Security+, CCENT, CCNA, MCSA, etc.)

Skills and Competencies

• Knowledge of common web technologies, enterprise, and network architecture
• Understanding of Modern security tools and controls
• Secure development life cycle methodologies
• Programming languages or other scripting languages
• Financial industry regulations such as GLBA, PCI, and SOX
• Knowledge of ports and protocols such as HTTP, HTTPS, 80, 443
• Data protection control
• Applied use of cryptography
• Knowledge of or demonstrated experience with defense in depth, trust levels, privileges and permissions.