Staff Security Engineer
On-siteBoise, Idaho, United States
Job Summary
Serve as the enterprise DLP authority, developing and managing data loss prevention policies spanning devices, electronic messaging, internet activities, cloud applications, and storage platforms. Develop and optimize advanced detection capabilities for source code, hardware designs, algorithms, product roadmaps, and other intellectual property using regex, fingerprints, EDM/IDM, and ML-based classifiers. Continuously tune DLP policies to reduce false positives and negatives while implementing automated remediation and tiered response workflows. Monitor and protect against data ex-filtration across key egress channels, including USB devices, email, SaaS applications, personal webmail, messaging platforms, generative AI tools, and cloud sync services. Author and maintain information protection standards, DLP governance, runbooks, exception processes, and data points to measure program health and operational efficiency. Lead enterprise-wide data classification, sensitivity labeling, rights management, and conditional access initiatives to safeguard sensitive information internally and externally.
Required Qualifications
- 5+ years of information security experience
- hands-on expertise in Data Loss Prevention (DLP)
- data classification/labeling
- enterprise-scale policy design
- experience across endpoints, email, web, SaaS, and cloud environments
- Strong technical foundation in Computer Science, Computer Engineering, or equivalent experience
- deep knowledge of networking
- deep knowledge of operating systems
- deep knowledge of intellectual property data protection
- deep knowledge of enterprise data movement
- Experience with AI and automation technologies
- machine learning concepts
- Copilot Studio
- UiPath
- SharePoint
- cloud AI platforms such as Azure AI Foundry and AWS Bedrock
- Proficiency with cloud and security operations technologies
- Azure
- AWS
- GCP
- SIEM/SOAR platforms
- scripting/automation tools such as PowerShell, Python, and Splunk SPL
- Excellent communication skills
- ability to operationalize security controls through custom keywords
- ability to operationalize security controls through dictionaries
- ability to operationalize security controls through automation
- ability to operationalize security controls through collaboration across multiple functions
Desired Qualifications
- master's degree or equivalent experience in technology or science
- relevant professional certifications
- Deep expertise in information security
- Deep expertise in cloud platforms
- Deep expertise in automation
- Deep expertise in technology powered by artificial intelligence
- passionate about safeguarding critical intellectual property
- passionate about safeguarding business assets across global enterprises
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.