Sr. Security Engineer

Fortra; Colombia; Presencial; COP 110.000.000 - 190.000.000; Jornada completa

Descripción de la vacante

Fortra is seeking a Senior Security Engineer to own the enterprise Data Loss Prevention program. You will work with the Lead Security Architect to evaluate, configure, deploy DLP technologies across endpoints, cloud services, email, networks, and collaboration platforms, moving capabilities from pilot to production rollout.

You will become a trusted subject-matter expert, translating business and regulatory requirements into scalable technical controls that protect Fortra’s data while minimizing

Formación

• Bachelor’s degree in Cybersecurity, CS, IT or related field or equivalent experience.
• 5+ years in Security/IT Ops with enterprise-grade DLP or data-classification tech.
• CISSP or equivalent certifications; SC-401 a plus.
• Familiar with GDPR/PCI-DSS and data-protection policies.

Responsabilidades

• Own technical implementation, configuration, and maintenance of enterprise DLP platforms.
• Design and implement DLP controls across endpoint, cloud, email, network, and collaboration environments.
• Serve as the technical SME for DLP configuration, integration, deployment, and support.
• Collaborate with Legal, HR, Risk & Compliance to define data classification schemas and rulesets.
• Design, test, deploy, and tune DLP policies to maximize risk reduction and minimize false positives.
• Integrate DLP with SIEM, SOAR, and incident-response platforms for monitoring and investigation.
• Develop dashboards and risk metrics for leadership on program coverage and performance.
• Engage with vendors to evaluate new capabilities and roadmap alignment.
• Provide technical escalation support for data-exposure events and platform issues.

Conocimientos

DLP technologies

Endpoint security

Cloud security

Policy tuning

SIEM SOAR integration

Threat detection

Collaboration with cross-functional

Programming/scripting (bonus)

Educación

Bachelor’s degree in Cybersecurity/CS/IT

Herramientas

Microsoft Purview

Forcepoint/ZScaler/Digital Guardian

Descripción del empleo

Whether you’re an experienced professional or just getting started, your contributions matter at Fortra. If you’re passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more!

As a hands-on technical role, the Senior Security Engineer will own the implementation and operational maturity of Fortra’s enterprise Data Loss Prevention program. Working closely with the Lead Security Architect and stakeholders across the organization, you will evaluate, learn, configure, and deploy DLP technologies across endpoints, cloud services, email, networks, and collaboration platforms. You will take new capabilities from initial evaluation and pilot through production rollout, policy tuning, and ongoing improvement. You will be expected to independently develop expertise in new DLP products and become a trusted internal subject-matter expert. The role will translate business, regulatory, and data-protection requirements into scalable technical controls that protect Fortra’s intellectual property, customer information, and regulated data while minimizing unnecessary disruption to employees. Success in this role requires strong technical ownership, self-directed learning, sound engineering judgment, and the ability to deliver complex security capabilities across a global organization.

What You’ll Do

• Own the technical implementation, configuration, maintenance, and ongoing improvement of Fortra’s enterprise DLP platforms.
• Partner with the Lead Security Architect to design and implement DLP controls across endpoint, cloud, email, network, and collaboration environments.
• Build expertise in new DLP technologies and serve as the primary technical subject-matter expert for their configuration, integration, deployment, and support.
• Collaborate with cross-functional stakeholders such as Legal, HR, Risk and Compliance to define data classification schemas, sensitive data discovery profiles and effective DLP rulesets
• Design, test, deploy, and tune DLP policies to maximize risk reduction while minimizing false positives, unnecessary user friction, and operational disruption.
• Implement detection and protection methods such as sensitivity labels, sensitive-information types, regular expressions, dictionaries, exact data matching, document fingerprinting, and source-code detection.
• Integrate DLP controls with endpoint-management, identity, Microsoft 365, cloud, email, network, and collaboration platforms.
• Integrate DLP alerts and telemetry with SIEM, SOAR, case-management, and incident-response platforms to support centralized monitoring and investigation.
• Monitor platform health, endpoint-agent coverage, connector status, policy effectiveness, product upgrades, and other indicators required to maintain reliable protection.
• Establish and maintain technical standards, implementation guides, operating procedures, runbooks, test plans, rollback procedures, and knowledge articles.
• Serve as the technical escalation point for complex data-exposure events, platform issues, policy failures, and suspected data-loss incidents.
• Develop dashboards, key performance indicators, and risk metrics that demonstrate program coverage, operational performance, user impact, and risk reduction to technical and senior leadership audiences.
• Partner with Security Awareness and business teams to develop targeted guidance and user coaching based on recurring DLP policy violations and data-handling risks.
• Work with vendors to resolve product issues, understand product roadmaps, evaluate new capabilities, and ensure that Fortra receives appropriate value from its DLP investments.
• Build productive relationships with internal teams and serve as a trusted advisor on DLP controls, data-protection risks, and practical risk-mitigation options.
• Other duties as assigned

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• 5+ years of experience in Security, IT Operations, or related roles with at least 2 years managing, deploying or leading enterprise-grade DLP, CASB, information-protection, or data-classification technologies (e.g., Microsoft Purview, Forcepoint, ZScaler, Digital Guardian).
• CISSP or equivalent, and Microsoft certifications such as SC-401 are considered a plus.
• Understanding of data-classification methods, sensitivity labels, structured and unstructured data discovery, regular expressions, exact data matching, document fingerprinting, and policy tuning.
• Experience taking a DLP control from evaluation or proof of concept through enterprise production deployment.
• Familiarity with regulatory frameworks and privacy standards (e.g. GDPR, PCI-DSS)
• Experience balancing preventive security controls with user experience and operational requirements.
• Ability to identify risks in business processes and communicate IT risks in clear, business-relevant terms.
• Capable of taking ownership and executing projects and initiatives independently
• Proficiency in programming or scripting languages is a plus.
• Strong interpersonal skills with a demonstrated ability to build relationships and communicate effectively with internal stakeholders and external vendors.
• Experience with M&A activity, global risks, and software development practices
• Advanced analytical and problem-solving capabilities.
• Collaborative team player with excellent communication and interpersonal skills.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.