Data Security Engineer

The Data Security Engineer helps TAB provide access to financial success for everyone by protecting customer and internal employee data.  This is a technical, hands-on role focused on building and operating solutions for data security in on-premise and cloud environments.  You will lead the operation, troubleshooting, and continuous improvement of enterprise Data Loss Prevention (DLP), Data Classification, Data Security Posture Management (DSPM), Insider Risk, and other data protection technologies.

Essential Duties and Responsibilities:


* Administer, optimize, and manage policy development, rule tuning, and platform configuration in Microsoft Purview and other tools.


* Operate and troubleshoot Intune Mobile Device Management.


* Lead the evaluation of Data Security Posture Management solutions.


* Develop and continuously enhance DLP event pipelines, including triage, incident escalation, and feedback loops to refine policy accuracy.


* Design and implement custom detection classifiers and rules for enhanced data discovery and advanced data protection scenarios.


* Develop and manage insider risk use cases, threat models, and behavioral detection policies in Microsoft’s Insider Risk platform.


* Integrate Purview tools with SIEM/SOAR platforms for alert correlation and automation.


* Build automation scripts, dashboards, and workflows to improve the efficiency of DLP operations and reporting.


* Partner with Security Operations, IT, Legal, and Compliance to define response workflows and ensure regulatory and policy alignment.


* Analyze and tune DLP incidents to reduce false positives and maximize signal-to-noise ratio.


* Identify security gaps in business processes involving sensitive data and lead remediation planning.


* Stay up to date on DLP threat landscape, new technologies, and product enhancements.


* Other duties as assigned.

Required education and experience:


* Bachelor's degree


* CISSP


* Act with integrity, take pride in your work, seek to excel, be curious, adaptable, and communicate well.

Preferred education and experience:


* Strong understanding of data protection lifecycle: requirements gathering, control implementation, service optimization.


* Deep understanding and hands on experience with core data protection functions: classification, discovery, encryption, masking, anomaly detection.


* 5+ years of experience working in and with technical teams.


* One or more of CISSP, GIAC, CYSA, SC-200, SC-400 – all professional certifications highly valued.

Competencies


* Translate business objectives and requirements to information security requirements.


* Comfortable working in a fast-paced environment.


* Excellent verbal and written communication skills for both in-person and remote situations.


* Understanding of best practices, risk assessment and how to implement changes at a business-wide level.


* Critical t...