{"id":68178,"url":"https://alion.io/job/invoicecloud-data-protection-and-security-engineer","title":"Data Protection and Security Engineer","company":{"id":37427,"name":"InvoiceCloud","domain":"invoicecloud.net","url":"https://alion.io/company/invoicecloud","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":18,"ghost_share":0.111,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":92,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, Pakistan"],"countries":["PK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":34000,"max_usd":78000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Tokenization","optional":false}],"status":"live","first_seen_at":"2026-08-21T04:40:20Z","employer_posted_date":null,"last_verified_at":"2026-08-21T04:40:20Z","board_verified":false,"closed_at":null,"days_open":56,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":56},"description":"We are looking for a Data Protection and Security Engineer to strengthen enterprise data security, privacy, and governance capabilities. The role will focus on data discovery and classification, DLP, encryption, key management, data lifecycle controls, compliance, and automation across corporate and cloud environments.\nThe core responsibilities for the job include the following:\nResults-Driven:\nLeads Data Discovery, Classification, and DLP Implementation by deploying and tuning data discovery and classification tooling across corporate and cloud environments, expanding coverage of sensitive data repositories, and improving DLP signal quality.\nImplements and strengthens encryption, tokenization, and key management controls, including key rotation, access control enforcement, and break-glass procedures, reducing exposure risk for sensitive corporate and customer data.\nDrives measurable improvements in data lifecycle management and retention Enforcement in partnership with system owners, ensuring appropriate storage patterns, retention schedules, and secure disposal of data assets.\nDelivers documented 30-, 150-, and 210-day outcomes, including expanded classification coverage, reduced DLP false positives, improved encryption posture, and executive-ready reporting on data protection KPIs.\nTakes Ownership:\nIntegrates Data Protection Tooling with Governance and Incident Response Systems (e. g., SIEM/SOAR, ticketing) to ensure DLP alerts, misconfigurations, and exposure risks are investigated and resolved in a structured and auditable manner.\nPartners with Compliance, Legal, and Privacy stakeholders to translate regulatory and contractual obligations into enforceable technical controls aligned to SOC 2 PCI, and privacy requirements.\nInvestigates and supports response to data protection incidents, including DLP events, accidental exposure, and misconfiguration scenarios, ensuring corrective actions are tracked to closure.\nDevelops and maintains documentation, operational standards, and runbooks that support audit readiness, evidence integrity, and repeatable control execution.\nDrives Efficiency:\nAutomates audit evidence collection and continuous control validation workflows using scripting and APIs (e. g., PowerShell, Python), reducing manual effort and improving reliability of compliance reporting.\nStandardizes data protection configurations, labeling models, and DLP policy structures to improve consistency across systems and reduce operational friction.\nEstablishes repeatable dashboards and metrics to measure data protection coverage, control effectiveness, false-positive rates, and remediation timelines.\nEmbeds privacy-by-design principles into product and engineering workflows by providing structured guidance on secure data flows, storage patterns, logging, and access controls.\nInnovative:\nApplies forward-looking data protection strategies to address evolving cloud, collaboration, and SaaS risks, ensuring controls adapt to modern work patterns and distributed environments.\nLeverages AI and automation to enhance data classification accuracy, improve anomaly detection in DLP alerts, and generate actionable insights from data protection telemetry.\nContinuously evaluates emerging data governance and privacy engineering capabilities, translating new tooling and best practices into scalable improvements across the enterprise.\nRequirements:\nBachelor's degree in information security, computer engineering, or a related field (or equivalent experience).\n5+ years of experience in data security, privacy engineering, or security engineering roles.\nHands-on experience with data discovery, classification, and governance platforms (e. g., Microsoft Purview, OneTrust, or similar).\nExperience implementing and tuning DLP controls across endpoints, email, collaboration platforms, and cloud storage environments.\nExperience implementing encryption, tokenization, and key management controls.\nFamiliarity with compliance frameworks such as SOC 2 PCI, and privacy regulations.\nAbility to automate workflows and integrations using scripting and APIs (PowerShell, Python, or similar).\nStrong documentation and cross-functional collaboration skills.\nCertifications such as CDPSE, CIPT, Security+, or similar are a plus.\nHigh integrity and sound judgment when handling sensitive and confidential information.","description_format":"text","description_chars":4348,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Billing & Subscription Management","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-08-21T04:40:20Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3 · green card filings: 1","filings_12m":3,"filings_prev_12m":4,"green_card_filings_12m":1,"median_offered_wage_usd":140000,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":30,"band":"fade","label":"Fading","p_open":0.4,"p_active":0.82,"p_room":0.9,"age_days":56,"expected_fill_days":92,"reasons":["seen:56","win:mid"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/invoicecloud-data-protection-and-security-engineer","json_url":"https://alion.io/job/invoicecloud-data-protection-and-security-engineer.json","meta":{"generated_at":"2026-10-16T21:23:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2317,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":37427},"rest":"https://alion.io/mcp/rest/get_company?id=37427"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finvoicecloud-data-protection-and-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finvoicecloud-data-protection-and-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finvoicecloud-data-protection-and-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/invoicecloud-data-protection-and-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finvoicecloud-data-protection-and-security-engineer"}]}