Information Protection Analyst & Engineer

Job Description

As a key member of the Information Technology Risk Management and Security (ITRM&S) organization, the successful candidate will act as a core member of the Information Protection team. This is a hybrid role featuring a dual focus on both operational DLP and DLP engineering to protect company data. The candidate will be responsible for managing and remediating instances of sensitive data leakage and insider risk, while concurrently configuring, tuning, and maintaining the information protection technologies that prevent them.

• →

  Investigate, analyze, and manage security incidents generated from Data Loss Prevention (DLP) and other information protection tools, utilizing log analysis, data visualization, and pattern analysis

• →

  Design, build, test, and deploy new DLP policies, rules, and logic across network, endpoint, and cloud environments to address emerging risks and align with the company's data protection strategy

• →

  Manage the full lifecycle of information protection incidents, from detection and escalation through to remediation, ensuring clear communication of status to stakeholders and management

• →

  Support the maintenance, enhancement, and troubleshooting of the information protection technology stack to ensure high availability, accurate detection, and optimal platform performance

• →

  Develop, implement, and maintain automation scripts and processes (e.g., using Python or PowerShell) to improve incident response workflows, reduce manual effort, and enhance reporting accuracy

• →

  Collaborate closely with the Global Security Group, Legal, Human Resources, and other business units to respond to sensitive incidents in accordance with established corporate policies

• →

  Continuously evaluate, improve, and challenge existing processes, procedures, and technical controls to adapt to a fast-moving and evolving security environment

• →

  Create, modify, and review security dashboards and metrics reports to provide actionable insights into the organization’s overall data risk posture

• Proven experience in an information security discipline, with a professional background that includes both active incident response and technical platform implementation

• Strong, practical experience with Data Loss Prevention (DLP) concepts, methodologies, and enterprise-grade tools

• Demonstrated ability to independently investigate and resolve complex security incidents (Tier 2/3 support levels), including performing in-depth root cause analysis

• Hands-on experience with scripting or programming languages (e.g., Python, PowerShell) specifically applied to automation, data extraction, or system integration

• Excellent analytical, problem-solving, and written/verbal communication skills, with the ability to convey technical risks to non-technical stakeholders

• Strong foundational understanding of networking protocols (TCP/IP), operating system architectures, and cloud security principles

• Ability to work effectively in a collaborative team environment, manage shifting priorities, and balance operational emergencies with project-based engineering tasks

• Direct experience with specific DLP and security solutions for network, endpoint, and cloud environments (e.g., Microsoft 365 Purview, Zscaler, CrowdStrike)

• Experience proactively creating, fine-tuning, and deploying detection policies within security platforms rather than just monitoring existing alerts

• Proven ability to build strong, trusted relationships with cross-functional business and technology stakeholders

• Up-to-date knowledge of the current global data protection landscape, privacy regulations, and emerging security threat trends

• Relevant industry certifications such as CISSP, CISM, or vendor-specific security engineering certifications

Current Employees apply HERE

Current Contingent Workers apply HERE