Data Risk Engineer

Overview

Implement and operate Data Loss Prevention (DLP) capabilities, investigate alerts, and support data protection and Insider Risk work involving customer data, proprietary information, and trading systems.

What you'll do

• Implement and tune DLP across SaaS, email, endpoints, and collaboration tools.
• Triage alerts, assess severity, and determine escalation actions.
• Improve rules, detections, monitoring, and data classification controls.
• Respond to data mishandling by coaching users, correcting issues, and documenting cases.
• Partner with People/HR, Legal, Compliance, Engineering, and IT on data-risk matters.
• Support Insider Risk investigations, audits, regulatory requests, and security awareness content.
• Assess risks involving unauthorized AI tooling and sensitive-data exposure.

What you'll need

• 3+ years of experience in DLP, data protection, or adjacent security work.
• Hands-on experience implementing and tuning DLP in SaaS or endpoint environments.
• Experience triaging alerts and deciding when to escalate.
• Understanding of data classification, PII handling, and accidental data-loss methods.
• Working knowledge of SIEM and log analysis tools such as ELK/Elastic or Splunk.
• Familiarity with NIST CSF, ISO 27001, SOC 2, GDPR, and APPI.
• Strong written communication, discretion, and cross-functional collaboration skills.

Nice to have

• Fintech, financial services, or trading-platform experience.
• Scripting or automation experience with Python or SQL.
• Major cloud-platform experience.
• Audit, Insider Risk, investigations, or incident-response exposure.
• CISSP, CISM, CIPP, or similar certification.

Details

• Remote work available globally.