Senior Data Protection Engineer

Guild Mortgage Company, closing loans and opening doors since 1960, is a mortgage banking firm dedicated to serving homeowners and buyers. The Senior Data Protection Engineer is responsible for designing, implementing, and maintaining corporate data protection solutions to safeguard sensitive information, working closely with various stakeholders to ensure compliance and security across multiple platforms.

Responsibilities:

• Design, deploy, configure, and maintain data protection solutions across endpoints, networks, cloud services, email systems, and collaboration platforms
• Customize and fine-tune data protection policies, rules, and classifiers
• Define and maintain data classification schemes and sensitivity labels
• Fine-tune data protection policies, rules and detection algorithms to minimize false positives
• Define and refine data classification labels, configurations and control parameters
• Ability to troubleshoot sensitivity label issues with end users
• Develop automated workflows to enhance data security and reduce manual intervention
• Monitor and triage data protection alerts and incidents
• Implement and operate DSPM controls, data discovery, posture assessments, and exposure remediation
• Documentation of systems designs, configurations and support processes including, but not limited to, creating/maintaining conceptual, logic and system diagrams, standard operating procedures and playbooks, and configuration guides
• Ensure data protection policies align with company and regulatory requirements, as well as industry regulations (e.g., GLBA, CCPA)
• Work closely with compliance and legal teams to enforce data protection requirements
• Provide technical guidance on emerging threats and data security trends
• Support data flow mapping, risk assessments, and remediation efforts
• Participate in architecture reviews and change management activities
• Integrate data protection platforms with SIEM and IAM systems

Requirements:

• A combination of education and experience may be considered in lieu of the Bachelor's degree
• Bachelors Degree directly related to the position or equivalent, preferred
• Degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
• Minimum five years experience in DLP engineering
• Strong, hands-on experience with Microsoft Purview (Data Loss Prevention and Information Protection) and Microsoft Defender
• Strong knowledge of encryption, data classification, network security, endpoint protection, and cloud security principles
• Solid understanding of regular expression and regex-based pattern matching
• Understanding data protection laws, compliance frameworks, and industry best practices
• Excellent verbal and written communication skills required
• Highly organized and detail-oriented; ability to work in a fast-paced, metrics-driven environment required
• Proficiency in Microsoft Office Suite, Word, Excel, Wiki, collaborative cloud-based programs, and third-party software applications required
• Commitment to company values
• Customer Service - Proactive attention to each person
• Integrity - Do and say what's right
• Respect - Treat others with dignity
• Collaboration - Listen and work together
• Learning - Seek knowledge and strive for improvement
• Excellence – Deliver the unexpected
• Experience with Microsoft Defender for Cloud and/or Zscaler is a plus
• Scripting (e.g., Python and PowerShell) and automation skills are a plus