Staff Data Security Engineer

Overview

Staff Data Security Engineer responsible for designing and implementing enterprise data protection capabilities across Microsoft 365, endpoints, and cloud platforms.

What you'll do

• Design, deploy, and tune DLP policies across Microsoft Purview DLP for Microsoft 365 and endpoint devices.
• Configure labeling policies, trainable classifiers, and exact data match (EDM) for sensitive data types.
• Integrate DLP with Microsoft Defender tools including Defender for Endpoint and Defender for Cloud Apps.
• Use Microsoft Sentinel to configure data connectors and analytic rules for DLP alerts and email security events.
• Monitor DLP incidents, perform root-cause analysis, and refine policies to reduce false positives.
• Extend DLP coverage beyond Microsoft 365 to third-party SaaS, on-premises systems, and network egress points.
• Deploy Data Security Posture Management (DSPM) tooling and leverage Varonis for data access governance.

What you'll need

• 6+ years of experience in information security with at least 4 years focused on data security, DLP, or DSPM.
• Hands-on expertise with Microsoft Purview DLP, including policy creation and incident management.
• Strong proficiency with the Microsoft Defender XDR suite (Defender for Endpoint, Cloud Apps, Identity, Office 365).
• Experience with Microsoft Sentinel, including custom analytic rules, KQL query development, and SOAR playbooks.
• Experience with Varonis Data Security Platform for data access governance and detection.
• Solid understanding of data classification frameworks and Microsoft Purview Information Protection (sensitivity labels and auto-labeling).

Details

• Location: Remote, Missouri, United States of America.
• Employment posting indicates a remote role.