{"id":2428025,"url":"https://alion.io/job/adt-dlpdata-security-engineer","title":"DLP/Data Security Engineer","company":{"id":1765638,"name":"ADT","domain":"adt.com","url":"https://alion.io/company/adt-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":93,"open_postings":55,"ghost_share":0,"stale_share":0.073,"repost_share":0,"time_to_fill_p50_days":104,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Boca Raton, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":77000,"max_usd":174000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"Gemini","optional":false},{"name":"Google BigQuery","optional":false},{"name":"OneDrive","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false},{"name":"Slack","optional":false}],"status":"live","first_seen_at":"2026-09-30T19:35:25Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-26T20:25:18Z","board_verified":true,"closed_at":null,"days_open":26,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":26},"description":"Summary:\nThe DLP / Data Security Engineer is responsible for engineering, administering, and continuously improving enterprise controls that protect sensitive information across Microsoft 365, Google, email, endpoints, browsers, networks, and SaaS applications. This role serves as a technical owner for data loss prevention and related data security capabilities, translating business, privacy, legal, and regulatory requirements into practical policies, detections, enforcement actions, monitoring, exception processes, and response workflows.\nThe ideal candidate combines hands-on platform administration with strong troubleshooting, policy-tuning, automation, and communication skills. Success requires balancing strong protection with business usability, reducing false positives, measuring control effectiveness, and partnering across Security Engineering, Security Operations, IT, Legal, Privacy, Compliance, and application teams.\nDuties and Responsibilities:\nMicrosoft Purview DLP and Information Protection\nAdminister and maintain Microsoft Purview Data Loss Prevention policies across Exchange Online, SharePoint, OneDrive, Teams, endpoints, and other supported locations.\n\nConfigure and tune sensitive information types, classifiers, sensitivity labels, policy rules, user notifications, overrides, alerting, incident workflows, and scoped exceptions.\n\nDesign policies that reduce unauthorized external sharing while preserving approved business workflows and maintaining clear, auditable exception paths.\n\nInvestigate DLP alerts and user-reported issues, identify false positives and control gaps, and implement measured tuning based on risk and evidence.\n\nMaintain policy naming standards, administrative access, change records, testing procedures, operational documentation, metrics, and effectiveness reviews.\n\nGoogle and Generative AI Data Security\nAdminister Google Sensitive Data Protection and related Gemini Enterprise data security controls, including prompt, response, file, and connector protection where supported.\n\nConfigure and tune protection for sensitive data, prompt injection, jailbreak attempts, and other approved AI security use cases.\n\nValidate DLP behavior through repeatable testing, troubleshoot inconsistent or overly broad detections, and document known limitations and user guidance.\n\nCoordinate logging and telemetry integration for Gemini and data protection events with BigQuery, SIEM, case management, and incident response workflows.\n\nSupport governance of sanctioned and unsanctioned generative AI use, including discovery, policy enforcement, user warnings, blocking, and risk-based exceptions.\n\nNetwork, SaaS, and CASB Data Protection\nAdminister and expand network-level DLP, inline data inspection, and SaaS DLP or CASB controls across web traffic, cloud applications, APIs, collaboration platforms, and file-sharing services.\n\nConfigure and tune data-in-motion and data-at-rest policies for sanctioned SaaS applications, external collaboration, cloud storage, uploads, downloads, copy-and-paste activity, and other exfiltration paths.\n\nPartner with Network Security and Cloud Security teams to align DLP enforcement with TLS inspection, secure web gateway, SASE, firewall, identity, and application control architectures.\n\nEvaluate overlapping capabilities across Purview, Google, Palo Alto, Slack, and other data security platforms to improve coverage and avoid conflicting or duplicate controls.\n\nContribute to proof-of-value testing, product evaluations, architecture decisions, rollout plans, and operational readiness for new data security capabilities.\n\nEmail Security\nAdminister email security controls that protect users and data from phishing, malicious content, impersonation, business email compromise, data leakage, and unauthorized forwarding or sharing.\n\nTune policies, detections, allow lists, block lists, quarantine actions, user-reporting workflows, and exceptions while minimizing unnecessary disruption.\n\nInvestigate email security incidents and collaborate with Security Operations on containment, remediation, threat hunting, and control improvements.\n\nProduce metrics and reporting on email threats, policy actions, coverage, false positives, user reporting, and outstanding risk.\n\nChrome Enterprise Browser Security\nAdminister Chrome Enterprise browser security and data protection configuration, including managed policies, organizational unit scoping, trusted integrations, and controlled testing.\n\nConfigure and evaluate browser-based controls for generative AI activity, file uploads and downloads, copy-and-paste restrictions, warnings, blocking, watermarking, and evidence capture where supported.\n\nCoordinate browser policy rollout with endpoint, identity, workstation engineering, and business stakeholders, using staged pilots and documented rollback plans.\n\nMonitor browser telemetry and policy effectiveness and integrate relevant security events into enterprise monitoring and response processes.\n\nOperations, Governance, and Response\nDevelop and maintain DLP response playbooks, operational runbooks, support procedures, architecture diagrams, policy inventories, exception documentation, and end-user guidance.\n\nCreate dashboards and reports for technical teams and leadership, including policy actions, prevented events, alert trends, false-positive rates, coverage gaps, and remediation progress.\n\nPartner with Legal, Privacy, Compliance, Human Resources, Internal Audit, and business owners on investigations, evidence requests, policy decisions, and regulatory or contractual requirements.\n\nParticipate in incident response involving suspected data exposure, insider risk, unauthorized sharing, credential leakage, or control bypass attempts.\n\nAutomate repeatable administrative, reporting, triage, and policy-validation activities using APIs, scripting, SIEM/SOAR workflows, and cloud-native tooling.\n\nStay current on data security, DLP, AI security, browser security, SaaS security, and email security threats and capabilities, and recommend pragmatic improvements.\n\nEducation and Experience:\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.\n\nHands-on experience administering enterprise DLP, information protection, email security, CASB, SaaS security, endpoint, browser, or network security controls.\n\nExperience with Microsoft Purview DLP and Microsoft 365 workloads strongly preferred.\n\nExperience with Google Cloud Sensitive Data Protection, Gemini Enterprise security controls, Chrome Enterprise, or comparable technologies preferred.\n\nExperience with email security platforms, secure web gateways, SASE, firewalls, SaaS security platforms, and SIEM/SOAR integration preferred.\n\nExperience supporting regulated or sensitive data environments and working with privacy, compliance, legal, or audit stakeholders.\n\nRelevant certifications such as CISSP, CCSP, Microsoft Security, Compliance, and Identity credentials, Google Cloud security credentials, or GIAC certifications are preferred.\n\nSkills and Knowledge:\nStrong understanding of data classification, sensitive information detection, context-based policy logic, exact data match concepts, labeling, encryption, access control, and data lifecycle protections.\n\nAbility to design layered controls across Microsoft 365, Google, email, endpoints, browsers, networks, and SaaS applications.\n\nPractical experience tuning detections to balance coverage, confidence, false positives, business impact, and enforceability.\n\nWorking knowledge of identity and access management, conditional access, managed devices, browser management, TLS inspection, APIs, and cloud logging.\n\nAbility to analyze alerts and logs, identify root cause, document evidence, and translate technical findings into clear recommendations.\n\nExperience with PowerShell, Python, REST APIs, KQL/XQL, BigQuery, regular expressions, or similar query and automation technologies is a plus.\n\nStrong documentation, stakeholder communication, and project coordination skills.\n\nAbility to work independently, manage competing priorities, and collaborate effectively in a fast-paced security engineering environment.","description_format":"text","description_chars":8209,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Email Security","Security Services","Access Control & Alarm Systems"],"lifecycle":[{"event":"open","at":"2026-10-13T08:14:36Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.897,"p_room":1,"age_days":25,"expected_fill_days":104,"reasons":["conf:6","velocity","win:early","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/adt-dlpdata-security-engineer","json_url":"https://alion.io/job/adt-dlpdata-security-engineer.json","meta":{"generated_at":"2026-10-26T22:22:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30329,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1765638},"rest":"https://alion.io/mcp/rest/get_company?id=1765638"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fadt-dlpdata-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fadt-dlpdata-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fadt-dlpdata-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/adt-dlpdata-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fadt-dlpdata-security-engineer"}]}