Sr Data Protection Engineer
We are seeking a Senior Data Protection Engineer to join our Cybersecurity Team. This role is dedicated to securing and protecting Republic Services’ information across all devices and environments. The ideal candidate will demonstrate passion, relentlessness, and resourcefulness in staying ahead of evolving threats while fostering a culture of security.
About the role
The Senior Data Protection Engineer is responsible for designing and implementing enterprise security solutions to protect sensitive data. This role will lead the Sensitive Data Management program, leveraging tools such as Endpoint Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), database monitoring, encryption methodologies (at rest, in transit, masking), and other technologies. The engineer will play a key role in evolving the program to align with business, technological, and industry changes.
Responsibilities
- Designs and implements enterprise security solutions.
- Functions as the Data Protection Technical Lead / Subject Matter Expert (SME) for enterprise security.
- Mentors DLP analysts on data protection controls, technologies, best practices, and techniques.
- Collaborates with the Senior Manager of Data Protection to define and implement processes and technologies for roadmap initiatives.
- Leads the development of processes and tool alignment for data at rest initiatives.
- Aids in educating data subject matter experts and key business technology and application leaders on data identification, secure handling, storage, and transfer of sensitive data.
- Manages DLP policies and configuration of technical tools per process requirements.
- Drafts configuration manuals, operating procedures, reports, and system hardening guidelines.
- Performs Level 3 / Level 4 incident response/support to triage security events/incidents, identify root cause, determine next steps, and drive incident resolution.
- Provides guidance in the application and reporting of data protection technology performance metrics.
- Performs other job-related duties as assigned or apparent.
Requirements
- Advanced level of knowledge with Data Protection technologies (CASB, proxy, network DLP, endpoint DLP, data discovery, key management, tokenization, encryption, etc.).
- Demonstrated Information Security understanding and industry best practices for developing a Data Protection program.
- Ability to communicate effectively with senior leaders (e.g., CISO), technical team members, and non-technical stakeholders.
- Excellent written and verbal communication skills.
- Proven expertise in developing and implementing strategic initiatives, complemented by strong tactical execution and problem-solving capabilities.
- Proven track record of fostering trust, transparency, and flexibility within a team environment.
Qualifications
- Minimum 5 years of experience in Data Loss Prevention or Security Engineer roles.
- Prior experience implementing and operating at least three of the following: DLP (e.g., endpoint, network), CASB, Data Classification, Data Encryption.
- Preferred: 7-10+ years of related industry experience in Cybersecurity and/or Information Technology.
- Preferred: Relevant certifications such as CISSP, CISM, GSEC, Security+, or similar.
- Familiarity with NIST Cybersecurity Framework (v2.0), Payment Card Industry Data Security Standard, California Consumer Privacy Act, and other pertinent data protection regulations and standards.
Pay
$120,400–165,500, dependent on experience.
Benefits
Eligible employees can elect to participate in:
- Comprehensive medical benefits coverage, dental plans, and vision coverage.
- Health care and dependent care spending accounts.
- Short- and long-term disability.
- Life insurance and accidental death & dismemberment insurance.
- Employee and Family Assistance Program (EAP).
- Employee discount programs.
- Retirement plan with a generous company match.
- Employee Stock Purchase Plan (ESPP).
- Paid Time Off (PTO).
For more details, visit Republic Services Benefits and Washington PTO Table.