[Remote] Senior Data Security Engineer (Remote Opportunity)
Note: The job is a remote job and is open to candidates in USA. T. Rowe Price is a premier global asset management organization with over 85 years of experience, providing investment solutions to a diverse clientele. They are seeking a Senior Data Security Engineer to join their Enterprise Security team, focusing on designing and optimizing data loss prevention controls to safeguard sensitive information and enhance regulatory compliance.
Responsibilities
- Design, implement, and maintain DLP controls across email, endpoint, cloud, web, and collaboration platforms
- Engineer and tune custom DLP detections using regex, Exact Data Matching (EDM), Indexed Document Matching (IDM), classifiers, and contextual telemetry
- Own the full DLP policy lifecycle, including policy creation, normalization, testing, deployment, tuning, version control, and change management
- Analyze and triage DLP and insider risk alerts, conduct root cause analysis, and recommend mitigation strategies to improve control effectiveness
- Partner with Security Operations, Incident Response, Risk, Legal, Compliance, and Information Protection teams to investigate potential data exfiltration and insider risk events
- Build and enhance automation workflows, dashboards, and reporting to improve visibility into data movement, user behavior, and program performance
- Serve as a technical subject matter expert for DLP platforms and data protection capabilities across the enterprise
- Translate regulatory requirements, business needs, and risk scenarios into practical, enforceable technical controls
- Continuously improve detection quality, operational processes, and reporting to advance program maturity and business alignment
- Contribute to the evaluation and responsible use of AI-enabled security capabilities that improve detection, analysis, and operational efficiency within data protection workflows
Skills
- Bachelor's degree or the equivalent combination of education and relevant experience AND
- 5+ years of experience in information security, with at least 3+ years focused on DLP engineering, data protection, policy development, or insider risk programs
- Hands-on experience with enterprise DLP platforms such as Symantec DLP, Proofpoint DLP, Microsoft Purview, or similar technologies in a production environment
- Strong experience designing and tuning DLP policies to improve signal quality and reduce false positives and false negatives
- Experience investigating DLP alerts, performing triage and root cause analysis, and supporting incident response or insider risk workflows
- Strong understanding of data protection concepts across structured and unstructured data, endpoint, email, cloud, and collaboration environments
- Excellent written and verbal communication skills, including experience developing documentation, playbooks, metrics, and stakeholder reporting
- Strong analytical skills, attention to detail, and the ability to operate effectively in a fast-paced, collaborative environment
- Experience supporting data protection programs within financial services or another highly regulated industry
- Knowledge of relevant regulatory and control frameworks, including GLBA, SOX, PCI-DSS, and broader data protection and privacy requirements
- Experience integrating DLP telemetry with SIEM, SOAR, case management, or insider risk platforms to improve detection, response, and reporting
- Familiarity with Microsoft security and compliance technologies, including Microsoft Purview Information Protection, Insider Risk Management, and Defender ecosystem capabilities
- Experience with scripting or automation using tools such as PowerShell, Python, or APIs to streamline DLP operations and reporting
- Understanding of data classification, labeling, and information governance practices
- Experience evaluating or applying AI/ML-enabled capabilities to improve alert enrichment, detection tuning, workflow automation, or analyst efficiency in security operations
- Ability to influence across teams, communicate risk clearly, and balance strong security outcomes with business enablement
- Demonstrated sound judgment, intellectual curiosity, and a continuous improvement mindset
Benefits
- Competitive compensation
- Annual bonus eligibility
- A generous retirement plan
- Hybrid work schedule
- Health and wellness benefits, including online therapy
- Paid time off for vacation, illness, medical appointments, and volunteering days
- Family care resources, including fertility and adoption benefits
Company Overview