Category-defining tech. Career-defining work.

Lots of tech companies disrupt. But, many fail when they try to scale. We're different. CockroachDB makes it easier for companies to build and scale apps. This is how and why we're helping some of the most innovative companies on the planet. We tackle problems head-on and focus on solutions that create lasting impact. 

Because when our customers win, we all win. 

 

The Role

Cockroach Labs is looking for an experienced Data Governance and Data Loss Prevention Engineer to join our Corporate Engineering team. This is a hands-on, cross-functional role focused on protecting Cockroach Labs’ data across endpoints, cloud platforms, and SaaS applications. You’ll take a leading role in the management of our DLP program, participate in incident response, and coordinate with the rest of the team on other aspects of Cockroach Lab’s corporate security. 

The ideal candidate has experience working on enterprise-level DLP programs, including hands-on work with CASB tools like Netskope, Zscaler, or similar. You know how to strike the right balance between strong data protections and enabling business operations, and you’re excited about building out a scalable data governance framework as we continue to grow. The right candidate is self motivating, eager to learn, and able to provide a high standard of user support when needed.

In this role, you’ll also have an opportunity to make a significant impact by helping to level up our Data Loss Prevention program and build out our Data Governance framework.

You Will

• Support the design, implementation, and maintenance of DLP controls to safeguard sensitive data.
• Administer and optimize CASB platforms such as Netskope or Zscaler to enforce policies across cloud apps and data flows.
• Develop and maintain scalable data classification and governance frameworks aligned with business and regulatory needs.
• Monitor, triage, and respond to DLP alerts and incidents across email, endpoints, and SaaS environments.
• Help analyze and reduce the use of Shadow IT and SaaS application sprawl generally.
• Collaborate with Legal, Compliance, and other teams to improve the vendor management and review process, as well as the AI application review process, as it relates to Data Governance and data loss prevention. 
• Design and implement automation to improve DLP visibility and reduce manual processes.
• Define and track KPIs for DLP effectiveness; regularly report findings and risk trends to leadership.
• Partner with legal, compliance, and security teams to support initiatives related to SOC 2, ISO 27001, GDPR, and third-party risk.
• Support internal security awareness programs and training initiatives around data handling and protection.
• Conduct risk assessments and recommend control improvements for internal and vendor data practices.
• Participate in incident response efforts, including investigation, containment, and remediation.
• Collaborate with the rest of the Corporate Security team and provide backup for other CorpSec functions as required. 
• Collaborate with IT and security teams to align access management, endpoint security, and governance policies

The Expectations

In your first 30 days, you will become an integrated member of our Corporate Engineering Team. You’ll become familiar with our existing systems and processes. We believe that it's essential for you to take this first month to become familiar with our technology, processes and our company.

In your second month, you will collaborate with the team in order to evaluate the current state of the DLP program and set a course for improvements and scope out projects to bolster our security posture. You will work to implement new DLP policies and enhance existing ones. 

In your third month, you will begin to take the reins of our Data Loss Prevention program and begin to build our new Data Governance framework. You will lead the effort to monitor and respond to DLP related security events, working to fine tune detections and reduce false positives. You will begin to set KPIs for the DLP program in order to track its effectiveness.

You Have

• 4+ years of experience in a Security Operations/IT security position
• 2+ years of hands-on experience with DLP tools and technologies (e.g., endpoint, web proxy, and email solutions). Specific experience with Netskope preferred.
• A strong understanding of standard corporate IT systems such as office networks, physical security systems, email and DNS configuration, file sharing systems, etc. 
• Experience independently managing short and long te