Data Protection

Data Protection Engineer Jobs

2 jobs found

2d ago

Data Protection Security Engineer – Netskope Lead

Denken Solutions, Inc. Foster City, CA

Foster City, CA

2d ago

$108+/hr Full time Analytics Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Data Protection Security Engineer – Netskope Lead. A hands-on security engineer with deep Netskope expertise capable of independently leading enterprise-wide NG SWG, NPA, and DLP initiatives. This hybrid role requires three days onsite and two days remote, based in Foster City, MI, at USD 108 per hour.

Responsibilities

Oversee end-to-end administration and health of the Netskope tenant, ensuring correct configuration, consistent enforcement, and alignment with the client’s security policies and risk posture.
Manage the NG SWG to inspect, control, and secure web traffic across the enterprise, leveraging Skope AI's threat intelligence and behavioral analytics for real-time anomaly detection and response.
Build and maintain SSL inspection policies, URL filtering categories, threat protection profiles, and cloud app controls, with clear understanding of how these layers interact.
Lead the full lifecycle deployment of Netskope NG SWG, including architecture design, tenant configuration, traffic steering, and integration with existing security infrastructure.
Configure and maintain SSL/TLS inspection, URL filtering, cloud application controls, and threat protection policies.
Integrate Netskope with identity providers (Okta, Azure AD) for user-based policy enforcement.
Manage Netskope client deployment across endpoints in coordination with endpoint and IT teams.
Establish and maintain logging, alerting, and reporting pipelines from the Netskope platform into SIEM tools.
Lead the design and deployment of Netskope NPA to enable zero-trust application access and to replace or supplement traditional VPN infrastructure.
Define publisher placement, application segmentation, and access policies aligned to least-privilege principles.
Collaborate with application owners and IT teams to onboard private applications to the NPA framework and continuously evaluate policies based on access patterns and security posture requirements.
Develop a comprehensive DLP strategy for web, cloud, and private application traffic traversing the Netskope platform.
Create, tune, and maintain DLP profiles and policies for PII, PHI, PCI, intellectual property, and other regulated or confidential data types.
Conduct structured DLP policy testing using representative data samples to validate detection accuracy and minimize false positives.
Establish a formal policy review cadence with Legal, Compliance, and Data Governance teams.
Investigate and respond to DLP policy alerts, escalating incidents per established procedures.
Serve as the subject matter expert for Netskope NG SWG, NPA, and DLP across security, IT, and business teams.
Produce and maintain architecture diagrams, runbooks, policy documentation, and operational procedures.
Provide guidance and knowledge transfer to junior engineers and security operations staff.
Engage with Netskope TAM and support resources to stay current on platform capabilities and roadmap.

Requirements

8+ years of experience in network security, cloud security, or information security engineering.
2+ years of hands-on experience deploying and managing Netskope NG SWG and/or NPA in an enterprise environment.
Proven experience developing and managing DLP policies, including policy design, testing, and tuning.
Strong understanding of zero-trust network access (ZTNA) concepts and architectures.
Proficiency with SSL/TLS inspection, proxy architectures, and cloud access security broker (CASB) functionality.
Working knowledge of identity and access management platforms (Okta, Azure AD, SAML, SCIM).
Familiarity with regulatory frameworks relevant to DLP (HIPAA, PCI-DSS, GDPR, CCPA, etc.).
Strong analytical and troubleshooting skills with the ability to work through complex network and policy issues.

Technologies

Netskope NG SWG
Netskope NPA
Okta
Azure AD
SAML
SCIM
SIEM
Splunk
Microsoft Sentinel
Python
PowerShell

View full job page →

5d ago

Data Loss Prevention (DLP) Security Engineer

S2i2 Inc Washington, DC 🇺🇸 Remote

Washington, DC

5d ago

$140k - $180k/yr Full time Cloud Platforms Cybersecurity Tools Data Loss Prevention

Apply Now

Job Description

Based in Washington, DC with remote work options, S2i2 Inc is seeking a Data Loss Prevention Security Engineer to strengthen its data protection program. The role centers on building DLP and File Content Analysis programs, defining data classifications, monitoring data flows, integrating FCA into security workflows, and analyzing incidents to maintain federal compliance across on‑premises and cloud environments.

Responsibilities

Develop and refine DLP policies to meet enterprise needs
Classify data and monitor usage across enterprise systems and cloud environments
Integrate file content analysis (FCA) into security workflows and tooling
Analyze DLP-related incidents and support investigations
Tune and optimize detection capabilities to minimize gaps and false positives
Ensure compliance with federal cybersecurity and data protection requirements across on‑premises and cloud platforms

Requirements

7+ years of relevant IT experience
Proven experience implementing modern security solutions in enterprise environments
Microsoft Purview enterprise DLP deployment experience: policy authoring, sensitive information type design, and DLP rule tuning across M365, OneDrive, SharePoint Online, and Teams
Forcepoint DLP enterprise deployment experience: endpoint DLP, network DLP, fingerprinting, and incident workflow
Experience operating in M365 GCC High and/or Azure IL4+ environments
RMF/ATO documentation experience for DLP solutions, particularly cloud-based with DoD reciprocity
Tier 3 enterprise support experience (24x7x365 on-call rotation)
Proven record of DLP rule tuning that reduced false positive rates
Experience with DISA STIGs as applied to DLP infrastructure
PowerShell and Microsoft Graph API automation for DLP policy management

Technologies

Microsoft Purview
Forcepoint DLP
Microsoft 365 (M365), OneDrive, SharePoint Online, Teams
PowerShell
Microsoft Graph API

Benefits

Support for professional certifications and degree programs
Leadership that is accessible to all employees
Regular company updates
Client networking social engagements
Monthly team-building activities (examples include Top Golf)
Commitment to community involvement, including veterans programs

Compensation

Salary range: USD 140,000 - 180,000 per year

About S2i2

S2i2 emphasizes professional development and supports certifications and degrees, with leadership that is approachable and open to feedback. The company maintains regular updates, encourages client networking, and hosts monthly team-building activities while actively supporting the community, including programs for veterans.

View full job page →

Data Protection Engineer Jobs

Data Protection Security Engineer – Netskope Lead

Data Loss Prevention (DLP) Security Engineer

Get Data Protection Engineer Jobs alerts