Information Security Engineer

We are seeking an Information Security Engineer (3–5 years experience) with hands on expertise in data security, DLP, and security automation, with growing exposure to AI security. This role will support and mature enterprise data protection capabilities while helping operationalize data security cleanup workflows through automation and cross team coordination.

The ideal candidate is comfortable executing and improving DLP controls, building automation to drive remediation, and partnering with application, platform, and business teams to reduce data risk at scale. The role offers opportunities to lead smaller initiatives or assist senior engineers on larger data security and AI governance efforts.

 

Key Responsibilities 

Data Security & DLP Operations 

• Assist in the implementation, tuning, and ongoing operation of DLP and data protection controls across M365, endpoints, email, SaaS, and cloud platforms 

• Maintain and refine DLP policies, classifiers, and detections to improve precision and reduce false positives 

• Support enterprise data discovery, classification, and exposure reduction efforts 

• Participate in data security incident triage, investigation, and remediation coordination 

Security Automation & Data Cleanup Enablement 

• Design and maintain automation workflows to support data security cleanup and remediation, including:  

• Automated email notifications to data owners 

• Jira / ticketing automation for tracking remediation actions 

• Workflow-driven follow‑ups and escalation paths 

• Use tools such as Power Automate, Jira automation, or similar platforms to reduce manual effort and improve consistency 

• Partner with data owners and technical teams to:  

• Communicate findings clearly 

• Provide guidance and assistance with cleanup where needed 

• Track remediation progress to closure 

Tooling & Platform Support 

• Hands‑on configuration and operational support for:  

• Microsoft Purview (Sensitivity Labels, DLP, Endpoint DLP, Data Classification) 

• Microsoft Defender (Endpoint and Cloud App data protection features) 

• Varonis (data discovery, access analytics, exposure and over‑permission analysis) 

• Proofpoint (email DLP and sensitive data monitoring) 

• Lightbeam or similar data access governance tools 

• Support reporting, dashboards, and audit‑ready evidence for data security controls 

AI Security & Responsible AI Support 

• Assist with AI security reviews, ensuring sensitive data is not shared with unauthorized AI tools 

• Support AI intake and approval workflows by validating:  

• Data scope 

• Access controls 

• Guardrails aligned with security and privacy requirements 

• Help enforce technical and procedural AI usage boundaries. 

Secrets & Secure Configuration Awar