Data Loss Prevention - Senior Security Engineer

About the role

At Cetera, our Information Security organization is responsible for protecting sensitive client, advisor, and enterprise data across a complex hybrid environment that includes on premises infrastructure, SaaS platforms, and public cloud services. We are seeking a Senior Security Engineer with strong experience in data discovery, classification, and protection to lead the implementation and operation of modern data security posture management (DSPM) and data loss prevention (DLP) platforms. This role is highly technical and hands‑on, with direct ownership of tools that provide enterprise‑wide visibility into data risk and exposure.

Cetera Financial Group® (Cetera) is a leading network of independent retail broker‑dealers and registered investment advisers empowering the delivery of objective financial advice to individuals, families, and company retirement plans across the country through trusted financial advisors and financial institutions. Cetera is one of the largest independent financial advisor networks in the nation and a leading provider of retail services to the investment programs of banks and credit unions. Advisor support resources offered through Cetera include award‑winning wealth management and advisory platforms, comprehensive broker‑dealer and registered investment adviser services, practice management support, and innovative technology. Cetera Financial Group (Cetera) is a network of independent retail firms, including those that are members of FINRA/SIPC: Cetera Advisors LLC; Cetera Wealth Services, LLC (formerly known as Cetera Advisor Networks); Cetera Investment Services LLC (marketed as Cetera Financial Institutions or Cetera Investors); and Cetera Financial Specialists LLC. Entities registered as investment advisers with the Securities and Exchange Commission include Cetera Investment Management LLC and Cetera Investment Advisers LLC. Cetera's principal office is located at 655 W. Broadway, 11th Floor, San Diego, CA 92101.

Responsibilities

• Lead the design, implementation, and day‑to‑day operation of DSPM and DLP solutions.
• Discover and classify sensitive, regulated, and business critical data.
• Continuously assess data exposure, access paths, and misconfigurations.
• Identify and prioritize data security risks across cloud, SaaS, and enterprise systems.
• Design policies aligned to data classification and regulatory obligations.
• Integrate with endpoint, email, cloud, and SaaS enforcement points.
• Tune alerts, build investigation workflows, and support response.
• Partner with cloud security, IAM, application security, and infrastructure teams to reduce unnecessary data exposure, eliminate overly permissive access and legacy data paths, and implement secure data handling patterns by design.
• Support audit, compliance, and risk management efforts (FINRA, SEC, internal controls) including evidence collection, reporting, and validation of data ownership, access controls, and classification accuracy.
• Develop and maintain data security standards, implementation patterns, architecture diagrams, operational runbooks, escalation paths, support documentation, and reference designs for consistent controls across environments.
• Act as a data security subject matter expert, advising leadership on data exposure trends, systemic risks, control effectiveness and gaps, and DSPM/DLP roadmap enhancements.

Requirements

• 5+ years of experience in information security engineering, with a strong focus on data security, data protection, or cloud security.
• Hands‑on experience