Security Operations Data Loss Prevention Engineer

Lehi · Santa Clara · USD 205,000-308,000 / year · Onsite · Posted Sep 28, 2026

At a glance

As our Security Operations Data Loss Prevention (DLP) Engineer, you will own and elevate Everpure’s enterprise data protection strategy across every digital and physical vector.
You will establish data governance standards and architect practical controls that safeguard customer information, source code, intellectual property, and other sensitive assets without hindering business velocity.
You will partner with Engineering, Legal, Privacy, DevSecOps, and GISO leadership to define how sensitive data is discovered, classified, monitored, and protected across the enterprise.

Own and mature the multi-channel DLP program end to end across endpoint, network, SaaS, application, cloud, and generative AI environments.
Author data-classification frameworks, handling requirements, and exception processes while maintaining a sensitive-data map with data owners.
Design and operate controls across macOS, Windows, and Linux, including removable media, printing, clipboard, screen capture, and local cloud-sync channels.
Define egress inspection strategies across email, web, and general network traffic, and prevent sensitive-data movement through applications, APIs, databases, file shares, CI/CD systems, and unstructured repositories.
Establish practical guardrails for sensitive data flowing into and out of public AI assistants, embedded copilots, internal models, and agentic tools.
Design, tune, and maintain high-fidelity DLP detections using regex, exact data match (EDM), indexed document matching (IDM), document fingerprinting, custom classifiers, and contextual conditions.
Develop SIEM queries, correlate DLP events with identity, asset, vulnerability, and threat context, and integrate telemetry with SOAR platforms.
Direct investigations into significant data-loss events, serve as the escalation point for complex findings, and brief Legal, Privacy, HR, and leadership.
Maintain runbooks, architectural diagrams, and program documentation while supporting audit and compliance engagements.

Demonstrated experience owning or materially contributing to an enterprise DLP or data-protection program across architecture, deployment, policy design, tuning, operations, and continuous improvement.
Hands-on experience with enterprise DLP technologies such as Microsoft Purview, Zscaler, Netskope, Forcepoint, Broadcom/Symantec, Trellix, CrowdStrike Data Protection, or equivalent platforms.
Strong experience with regex, EDM/IDM, document fingerprinting, data classification, custom classifiers, and detection tuning.
Experience with data discovery, classification, CASB/SaaS security, cloud data protection, and controls for sensitive data across enterprise and cloud environments.
Experience using Python, PowerShell, REST APIs, SIEM, and/or SOAR platforms to automate response, analyze telemetry, and improve operational outcomes.
Working knowledge of data-protection and security frameworks such as NIST CSF, ISO 27001, SOC 2, GDPR, CCPA, PCI DSS, and HIPAA.
Ability to translate complex data-protection risks into clear decisions and business outcomes for technical teams, cross-functional partners, executives, auditors, and other stakeholders.

Experience with AI/GenAI data protection, DSPM, insider risk, privacy engineering, or source-code and secrets protection.
Experience securing data in AWS, Azure, or GCP, or integrating data-protection controls into CI/CD, DevSecOps, containers, or Kubernetes.
Background in application security, cloud security, or privacy engineering.
Experience communicating data-protection strategy and posture to executives, auditors, regulators, or enterprise customers.
Relevant security, privacy, or cloud certifications such as CISSP, CISM, CIPP, GIAC, SC-400, or equivalent.

Primarily an in-office environment.
Expected to work from the Santa Clara or Lehi office in compliance with Everpure's policies.

Show all 15 skills