Senior Security Engineer II – Cybersecurity Data Protection Engineer

CDW is a leading multi-brand provider of information technology solutions, and they are seeking a Senior Security Engineer II to protect their information assets while enabling secure innovation. The role focuses on advancing CDW's data security program and operationalizing data protection capabilities in partnership with various teams.

Responsibilities:

• Serve as a hands‑on senior engineer responsible for executing, scaling, and operationalizing CDW’s data security capabilities in partnership with architecture and leadership teams
• Own the engineering implementation and day‑to‑day operation of CDW’s data protection platforms, with a primary focus on Microsoft Purview
• Design, deploy, and continuously improve Information Protection, Data Loss Prevention (DLP), and data access controls across cloud, SaaS, endpoint, and hybrid environments
• Engineer and operationalize data classification and labeling by defining sensitivity schemas, classification taxonomies, and enforcement patterns
• Build, tune, and maintain detection logic including Regular Expressions, EDM classifiers, and custom pattern‑matching to identify and protect sensitive data
• Lead data discovery and inventory efforts across structured and unstructured data sources to identify exposure and risk
• Own the engineering execution and operation of CDW’s Data Security Posture Management (DSPM) capabilities, translating findings into actionable remediation
• Analyze data exposure trends, leakage paths, and emerging threats, and produce metrics and insights that inform security priorities and decisions
• Design and implement data protection architectures that scale across enterprise environments, focusing on secure implementation and practical delivery
• Validate and enforce encryption, access controls, and data movement restrictions aligned to Zero Trust principles
• Integrate data security controls with identity, endpoint, network, cloud, and SIEM platforms to improve visibility and reduce risk
• Support data‑related security incidents and investigations, contributing to containment, remediation, and control improvements
• Improve detection and response by correlating signals across Purview, DSPM, DLP, SIEM, and endpoint platforms
• Drive operational excellence through automation, process improvement, and repeatable security engineering workflows
• Act as a technical mentor and subject‑matter expert for data protection engineering, providing actionable guidance to Legal, Privacy, Cloud, Identity, and Architecture partners

Requirements:

• Bachelor's degree and 7+ years of hands‑on cybersecurity engineering experience, with a strong focus on data security, OR
• 11+ years of information technology experience, to include 7+ years of hands‑on cybersecurity engineering experience, with a strong focus on data security
• Deep, hands‑on experience with Microsoft Purview, including deploying and operating Information Protection and Data Loss Prevention (DLP) controls at scale
• Proven experience with data discovery, classification, labeling, and data inventory management across structured and unstructured data
• Demonstrated ability to own the engineering execution and operational maturity of enterprise data security programs in partnership with architecture and leadership teams
• Strong track record engineering scalable, automated, and secure data protection solutions in complex enterprise environments
• Experience developing and operating data protection capabilities focused on data discovery, data inventory, data risk assessment, and encryption across multiple data types
• Hands‑on experience operating or integrating with Data Security Posture Management (DSPM) platforms
• Experience designing and implementing data protection architectures that scale across cloud, SaaS, endpoint, and hybrid environments
• Ability to integrate data security controls with identity, endpoint, network, cloud, and SIEM platforms to improve visibility and risk reduction
• Strong analytical skills with the ability to identify data exposure patterns, assess risk, and translate findings into actionable remediation
• Excellent communication skills, with the ability to translate technical data security concepts into business‑relevant outcomes
• Skilled at building rapport and establishing effective partnerships across Legal, Privacy, Cloud, Identity, and Architecture teams
• Strong problem‑solving and collaboration skills, with demonstrated ability to explain complex technical concepts to diverse audiences
• Commitment to continuous improvement, security process engineering, and operational excellence
• Ability to stay current with emerging trends in data security, cybersecurity, and AI, ensuring data protection controls remain effective and relevant
• Familiarity with applicable data security frameworks, standards, and regulatory requirements, including GDPR, PCI, and SOX
• Certified Information Systems Security Professional (CISSP), a plus
• Certified Information Security Manager (CISM), a plus
• Experience with AWS, GCP, or other cloud service providers beyond Microsoft, a plus