Data Protection Security Engineer

ConAgra Fds Packaged Fds; Omaha (NE); On-site; USD 74,000 - 109,000; Full time

Job summary

ConAgra Fds Packaged Fds is seeking an Identity and Data Protection Specialist to join the Identity Management team. You will help build and operationalize the enterprise data protection program, focusing on identifying and classifying sensitive data and implementing protection controls across cloud, on‑premises, endpoint, email, and SaaS.

You will administer data protection platforms, tuning DLP policies, investigating exposures, collaborating with data owners and technology partners, and

Qualifications

• Bachelor's degree in Cybersecurity or related field, or equivalent experience.
• 3+ years of enterprise tech experience, incl. cybersecurity/data protection.
• Hands-on experience with data protection/DLP platforms such as Purview/Varonis/Proofpoint.
• Experience with sensitive-data discovery and labeling.
• Knowledge of DLP policy lifecycle (config, testing, tuning, remediation).
• Understanding of data protection/governance concepts (sharing/retention).
• Familiarity with identity/access concepts and least-privilege.
• Strong communication, both technical and non-technical.
• Experience in a matrixed organization.
• PowerShell/Python/REST APIs experience preferred.
• Familiarity with Zero Trust/NIST/ISO27001 frameworks.
• Security certifications preferred.
• Willingness to travel up to 10%.

Responsibilities

• Administer and support data protection technologies across environments.
• Discover and classify sensitive data; implement sensitivity labels and encryption.
• Configure, test, and tune DLP policies; reduce false positives and manage exceptions.
• Monitor alerts; investigate data exposure, sharing, policy violations, or exfiltration.
• Coordinate remediation with data owners and tech teams.
• Translate privacy/governance requirements into technical controls.
• Support retention/records management via data protection tools.
• Apply least-privilege safeguards with IAM teams.
• Contribute to program documentation, runbooks, and user guidance.
• Assist automation and emerging data protection capabilities.

Skills

Troubleshooting

Analytical

Problem solving

Communication

Education

Bachelor's degree in Cybersecurity

Tools

Microsoft Purview

Varonis

Proofpoint DLP

Job description

Reporting to the Manager, Information Security, you will join the Identity Management team and help build and operationalize the enterprise data protection program. You will focus on identifying and classifying sensitive data, administering data protection technologies, implementing and tuning protection controls, and investigating potential data exposure. Working with data owners, security teams, and technology partners, you will help strengthen how sensitive information is identified, labeled, protected, monitored, and securely shared across cloud, on-premises, endpoint, email, and software-as-a-service environments.

A Taste of Your Responsibilities

• Administer and support enterprise data protection technologies, including Microsoft Purview, Varonis, Proofpoint Data Loss Prevention, or comparable platforms.
• Discover and classify sensitive data and implement sensitivity labels, encryption, secure-sharing controls, and other information protection measures.
• Configure, test, and tune data loss prevention policies to improve control effectiveness, reduce false positives, and manage exceptions.
• Monitor data protection alerts and investigate potential data exposure, inappropriate sharing, policy violations, or suspected data exfiltration. Coordinate remediation and escalation when needed.
• Partner with data owners and technology teams to identify sensitive information, understand how it is accessed and shared, and remediate oversharing or inappropriate access.
• Translate business, privacy, legal, and data governance requirements into technical data protection controls.
• Support retention, records management, and secure information-sharing requirements through data protection technologies and controls.
• Apply least-privilege and identity-based safeguards to sensitive data in partnership with Identity and Access Management teams.
• Support the continued development of the data protection program, including documentation, platform improvements, metrics, reporting, runbooks, and user guidance.
• Contribute to automation and emerging data protection capabilities, including artificial intelligence data-security controls, as the program evolves.

Ingredients Required for Your Success

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or a related field, or equivalent professional experience.
• Three or more years of enterprise technology experience, including at least two years in cybersecurity, data protection, data governance, or a related area.
• Hands-on experience administering, configuring, or supporting an enterprise data protection or data loss prevention platform such as Microsoft Purview, Varonis, Proofpoint Data Loss Prevention, or comparable technology.
• Experience with sensitive-data discovery, classification, sensitivity labeling, or related information protection controls.
• Working knowledge of the data loss prevention policy lifecycle, such as policy configuration, testing, tuning, alert investigation, exception handling, and remediation.
• Working knowledge of data protection and governance concepts, including secure information sharing, retention, or records management.
• Working knowledge of identity and access concepts, including least privilege and access-related data protection risks.
• Strong troubleshooting, analytical, problem-solving, organizational, written, and verbal communication skills, including communicating technical risks and recommendations to technical and non-technical audiences.
• Experience working independently and collaboratively within a matrixed organization.
• Hands-on Microsoft Purview experience preferred.
• Experience with Varonis, Proofpoint Data Loss Prevention, or other enterprise data discovery and protection technologies preferred.
• Experience protecting data across cloud, on-premises, endpoint, email, and software-as-a-service environments preferred.
• Experience supporting privileged access management, identity governance, or other identity-based security controls preferred.
• Experience with PowerShell, Python, REST APIs, connectors, workflow automation, or other security automation technologies preferred.
• Experience supporting insider-risk, data-exposure, or data-exfiltration investigations preferred.
• Familiarity with Zero Trust, National Institute of Standards and Technology, International Organization for Standardization 27001, or similar security frameworks preferred.
• Relevant certification in information security, data protection, cloud security, governance, or identity preferred.
• Exposure to data protection controls for artificial intelligence applications, agents, or other emerging artificial intelligence technologies preferred.
• Willingness to travel up to 10%.

Physical Requirements

This role does not require work at or regular visits to manufacturing plants.

Number of Days in Office

3

Compensation

Pay Range:$73,600-$109,300 The annual salary listed above is the expected offering for this position. An