Director of Data Protection Engineering

Location: Jersey City, NJ; Tampa, FL; or Coppell, TX (Hybrid) · Job ID: 3058271

About the role

Our organization is seeking a Director of Data Protection Engineering to deliver technical leadership for the engineering and evolution of enterprise-wide data protection capabilities. This individual will steer the architecture, engineering, and integration of technical controls that secure sensitive data across endpoints, email, cloud, SaaS, applications, APIs, and emerging artificial intelligence environments. Operating as a player-coach, this leader must combine deep security engineering expertise with hands-on technical acumen to manage team engineers and design standardized, consistent policies across all egress channels.

Responsibilities

• Provide technical leadership and strategic direction to establish data protection as a robust engineering capability.
• Define and evolve the target-state architecture for protecting sensitive data across enterprise, cloud, and artificial intelligence environments.
• Lead the hands-on engineering, integration, and automation of core capabilities, including data classification, labeling, Data Loss Prevention (DLP), and Data Security Posture Management (DSPM).
• Set consistent DLP design standards across email, cloud, web, and SaaS, translating those designs into functional, keyboard-level detection rules for secrets and cryptographic keys.
• Direct Microsoft Purview Information Protection configurations, prioritizing sensitive data taxonomy and automated labeling implementations.
• Engineer policy-based enforcements and integrations using API gateways, security services, and automation to reduce reliance on manual configuration.
• Collaborate with Enterprise Architecture, Cybersecurity, and platform teams to embed data protection controls seamlessly into modern technology solutions.
• Manage, develop, and mentor internal security engineers, fostering a strong engineering discipline and reducing vendor-specific dependencies.
• Document and defend every configuration change, architecture decision, and initiative priority within a highly regulated environment.
• Evaluate security technologies and vendors (such as Zscaler, Proofpoint, and DSPM tools like BigID or Varonis) based on scalability, effectiveness, and architectural fit.

Requirements

Education

• Bachelor's degree in Computer Science, Cyber Security, Engineering, or a related discipline, or equivalent practical experience.

Experience

• Five to eight or more years of experience in security engineering, platform engineering, software engineering, or security architecture.
• Experience in financial services or another highly regulated industry is required, including a proven background in establishing engineering rigor and defensible documentation.
• Experience building, leading, and developing engineering teams is necessary.

Technical Skills

• Deep expertise in Microsoft Purview, particularly Information Protection, data taxonomy, and automated data labeling.
• Demonstrated experience configuring DLP policies across multiple egress channels, including email, cloud, and web.
• Strong knowledge of modern engineering practices, including infrastructure as code, CI/CD, APIs, and cloud-native environments.
• Understanding of security risks and controls related to artificial intelligence and large language models.

Preferred qualifications

• Experience with data masking, tokenization, secure browser controls, or email security technologies.
• Knowledge of complementary security architectures, including malware protection, network security, and compensating controls.
• Relevant security certifications such as OSP, OSWE, OSWA, or related credentials.
• Experience managing internal data protection capabilities alongside external advisory or consulting partners.

Benefits

• Medical, dental, vision, life, disability, and other insurance plans offering an optional layer of financial protection.
• Employee Stock Purchase Program (ESPP).
• 401(k) program with eligibility typically within 30 days of start; company match after 12 months of tenure.
• Health Savings Account (HSA) on the High Deductible Health Plan (HDHP).
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program; access to certification prep and a library of technical and leadership courses, books, and seminars after 6+ months of tenure.
• Certification discounts and perks for associations including CompTIA and IIBA.
• Dedicated customer service team for consultants addressing benefits and resource questions.
• Certified Career Coach.