Data Loss Prevention - Senior Security Engineer

Cetera Financial Group; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Cetera Financial Group is seeking a Senior Security Engineer to lead DSPM and DLP initiatives, owning data discovery, classification, and protection across hybrid environments. You will work with cloud security, IAM, and application security teams to reduce data exposure and ensure compliant data handling in AWS/Azure and SaaS platforms.

The role combines design, hands-on implementation, and operational duties, with a focus on reducing risk and improving data governance across enterprise systems.

Qualifications

• 5+ years of experience in information security engineering with data security focus.
• Hands-on experience implementing or operating DSPM, data discovery, or data classification.
• Experience with enterprise DLP including endpoint, email, SaaS, and cloud controls.
• Solid understanding of data types, classification schemes, and lifecycle risks.
• Experience securing data across cloud, SaaS, and on-premise repos, and familiarity with NIST CSF/800-53, FINRA/SEC.

Responsibilities

• Lead design, implementation, and daily operation of DSPM and DLP solutions.
• Discover, classify, and protect sensitive data; assess exposure and misconfigurations.
• Prioritize data security risks across cloud, SaaS, and enterprise systems.
• Design policies aligned to data classification and regulatory obligations.
• Integrate with endpoints, email, cloud, and SaaS enforcement points.
• Tune alerts, support investigations, and guide incident response.
• Collaborate with cloud security, IAM, app security, and infra teams.

Skills

DSPM

DLP

Data discovery

Data classification

Cloud security

Regulatory frameworks

Risk-based remediation

Job description

At Cetera, our Information Security organization is responsible for protecting sensitive client, advisor, and enterprise data across a complex hybrid environment that includes on premises infrastructure, SaaS platforms, and public cloud services.

We are seeking a Senior Security Engineer with strong experience in data discovery, classification, and protection to lead the implementation and operation of modern data security posture management (DSPM) and data loss prevention (DLP) platforms. This role is highly technical and hands-on, with direct ownership of tools that provide enterprise-wide visibility into data risk and exposure.

What will you do:

• Lead the design, implementation, and day to day operation of DSPM and DLP solutions.
  • Discover and classify sensitive, regulated, and business critical data
  • Continuously assess data exposure, access paths, and misconfigurations
  • Identify and prioritize data security risks across cloud, SaaS, and enterprise systems
  • Policy design aligned to data classification and regulatory obligations
  • Integration with endpoint, email, cloud, and SaaS enforcement points
  • Alert tuning, investigation workflows, and response support
• Partner closely with cloud security, IAM, application security, and infrastructure teams to:
  • Reduce unnecessary data exposure
  • Eliminate overly permissive access and legacy data paths
  • Implement secure data handling patterns by design
• Support audit, compliance, and risk management efforts, including:
  • FINRA, SEC, and internal control requirements
  • Evidence collection and reporting related to data protection
  • Validation of data ownership, access controls, and classification accuracy
• Develop and maintain:
  • Data security standards, implementation patterns, and architecture diagrams
  • Operational runbooks, escalation paths, and support documentation
  • Reference designs that support consistent data security controls across environments
• Act as a data security subject matter expert, advising leadership on:
  • Data exposure trends and systemic risks
  • Control effectiveness and gaps
  • DSPM and DLP roadmap enhancements

What you will have:

• 5+ years of experience in information security engineering, with a strong focus on data security, data protection, or cloud security
• Hands on experience implementing or operating one or more modern DSPM, data discovery, or data classification platforms.
• Experience implementing or supporting enterprise DLP solutions, including:
  • Endpoint, email, SaaS, and/or cloud data controls
  • Policy tuning to reduce false positives while maintaining strong coverage
• Solid understanding of:
  • Structured and unstructured data types
  • Data classification schemes and sensitivity levels
  • Data lifecycle risks (creation, access, sharing, storage, and deletion)
• Experience securing data across:
  • Public cloud platforms (AWS and/or Azure)
  • SaaS applications
  • Enterprise file systems and data repositories
• Familiarity with security and regulatory frameworks, including:
  • NIST CSF and NIST 800-53
  • FINRA and SEC requirements
  • Data protection and privacy control expectations
• Demonstrated ability to translate technical findings into risk-based remediation priorities