Lead, Infrastructure Security Engineer - Data Loss Prevention

Job Classification:

Technology - Engineering & Cloud

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you’ll unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions. 

Your Team & Role

As a Lead, Infrastructure Security Engineer on the Data Protection Team, you will partner with product owners, tech leads, designers, engineers, and delivery professionals to implement security controls aligned with enterprise goals. You will work on multiple areas in the world of data protection, private and public cloud computing, software engineering, and layered security in the enterprise. The projects utilize many traditional and unique data protection methods for layered defense in depth to complete restructuring of frameworks and management of data protection.

You will design and develop security features for our products, systems, applications and/or solutions that solve sophisticated business problems, deploy innovative products, services, and experiences to delight our customers! In addition to advanced technical expertise and experience, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus to all that you do. 

Here is What You Can Expect on a Typical Day  

• Create, code and support solutions to automate the creation, management, or destruction of infrastructure; remove technical impediments
• Provide easily consumable services to software development teams to assist in the consumption of infrastructure solutions and partner to implement them
• Accelerate application development by building patterns of infrastructure services that are consumed self-service, resilient, reliant and in accordance with Prudential standards
• Ensures product security is maintained throughout the product lifecycle, integrating new security features and updates into existing products.
• Collaborate with product owners in understanding needs and defining feature stories, tech leads in defining technical design and other team members to understand the system end-to-end and deliver robust solutions that bring about business impact and support the goals
• Automate unit and integration test cases, solve problems, and add new value with automation
• Develop corporate platform standards based on cost, capability, and capacity requirements to drive business value; document solutions to support the adoption of developed solutions
• Architect, design, assess, and address Protection and Data Loss Prevention (DLP) and associated technology strategies.
• Bring a strong understanding of relevant and emerging technologies, provide input and coach team members and embed learning and innovation in the day-to-day  
• Work on complex problems in which analysis of situations or data requires an evaluation of intangible variables.
• Apply infrastructure fundamentals to Linux/Unix operating systems, database, network and TCP/IP, and common communication protocols 
• Use programming languages including but not limited to Python, Shell/Power scripting, Groovy, Modern languages and Ansible, CloudFormation and Terraform frameworks 

The Skills & Expertise You Bring

• Ability to provide subject matter expertise and execute multiple programs/projects simultaneously.
• High degree of proficiency in developing target & current state architectures, identify gaps, build a roadmap for tactical phased implementations to achieve target state.
• Ability to use data and analysis to determine attack surfaces, remediation work effort, and governance to determine integrity, and sustainability of controls.
• Ability to work both independently and as a member of a cross enterprise team.
• Provide subject matter expertise in multiple domain focus areas including but not limited to:
o Symantec Data Loss Prevention (on-prem / cloud) environments
o DTEX or similar UEBA (User & Endpoint Behavior Analytics)
o Cloud Access Security Broker (CASB)
o AWS / Azure security experience
• Operations and troubleshooting of the DLP environment, including associated technologies and infrastructure.
• Experience with use of the Privileged Access Management platform to store credentials.
• Ability to automate processes for the administration of Data Loss Prevention and integration with other technology components.
• Ability to integrate with monitoring solutions su