Senior Security Engineer II – Cybersecurity Data Protection Engineer

Role Overview

• Serve as a hands‑on senior engineer responsible for executing, scaling, and operationalizing CDW’s data security capabilities in partnership with architecture and leadership teams.
• Own the engineering implementation and day‑to‑day operation of CDW’s data protection platforms, with a primary focus on Microsoft Purview.
• Design, deploy, and continuously improve Information Protection, Data Loss Prevention (DLP), and data access controls across cloud, SaaS, endpoint, and hybrid environments.
• Engineer and operationalize data classification and labeling by defining sensitivity schemas, classification taxonomies, and enforcement patterns.
• Build, tune, and maintain detection logic including Regular Expressions, EDM classifiers, and custom pattern‑matching to identify and protect sensitive data.
• Lead data discovery and inventory efforts across structured and unstructured data sources to identify exposure and risk.
• Own the engineering execution and operation of CDW’s Data Security Posture Management (DSPM) capabilities, translating findings into actionable remediation.
• Analyze data exposure trends, leakage paths, and emerging threats, and produce metrics and insights that inform security priorities and decisions.
• Design and implement data protection architectures that scale across enterprise environments, focusing on secure implementation and practical delivery.
• Validate and enforce encryption, access controls, and data movement restrictions aligned to Zero Trust principles.
• Integrate data security controls with identity, endpoint, network, cloud, and SIEM platforms to improve visibility and reduce risk.
• Support data‑related security incidents and investigations, contributing to containment, remediation, and control improvements.
• Improve detection and response by correlating signals across Purview, DSPM, DLP, SIEM, and endpoint platforms.
• Drive operational excellence through automation, process improvement, and repeatable security engineering workflows.
• Act as a technical mentor and subject‑matter expert for data protection engineering, providing actionable guidance to Legal, Privacy, Cloud, Identity, and Architecture partners.

Requirements

• Bachelor’s degree and 7+ years of hands‑on cybersecurity engineering experience, with a strong focus on data security, OR 11+ years of information technology experience, to include 7+ years of hands‑on cybersecurity engineering experience, with a strong focus on data security.
• Deep, hands‑on experience with Microsoft Purview, including deploying and operating Information Protection and Data Loss Prevention (DLP) controls at scale.
• Proven experience with data discovery, classification, labeling, and data inventory management across structured and unstructured data.
• Demonstrated ability to own the engineering execution and operational maturity of enterprise data security programs in partnership with architecture and leadership teams.
• Strong track record engineering scalable, automated, and secure data protection solutions in complex enterprise environments.
• Experience developing and operating data protection capabilities focused on data discovery, data inventory, data risk assessment, and encryption across multiple data types.
• Hands‑on experience operating or integrating with Data Security Posture Management (DSPM) platforms.
• Experience designing and implementing data protection architectures that scale across cloud, SaaS, endpoint, and hybrid environments.
• Ability to integrate data security controls with identity, endpoint, network, cloud, and SIEM platforms to improve visibility and risk reduction.
• Strong analytical skills with the ability to identify data exposure patterns, assess risk, and translate findings into actionable remediation.
• Excellent communication skills, with the ability to translate technical data security concepts into business‑relevant outcomes.
• Skilled at building rapport and establishing effective partnerships across Legal, Privacy, Cloud, Identity, and Architecture teams.
• Strong problem‑solving and collaboration skills, with demonstrated ability to explain complex technical concepts to diverse audiences.
• Commitment to continuous improvement, security process engineering, and operational excellence.
• Ability to stay current with emerging trends in data security, cybersecurity, and AI, ensuring data protection controls remain effective and relevant.
• Familiarity with applicable data security frameworks, standards, and regulatory requirements, including GDPR, PCI, and SOX.
• Certified Information Systems Security Professional (CISSP), a plus.
• Certified Information Security Manager (CISM), a plus.
• Experience with AWS, GCP, or other cloud service providers beyond Microsoft, a plus.

Tech Stack

• AWS
• Cloud
• Cyber Security
• Google Cloud Platform

Benefits

• Annual bonus target of 10% subject to terms and conditions of plan