Data Risk Engineer – DLP & Insider Risk

Diagram; Richmond (VA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Stock options

Health benefits

Home-office setup

Monthly stipend

Job summary

Alpaca is seeking a Data Risk Engineer to implement and tune DLP across SaaS, email, endpoints, and collaboration tools. You will triage alerts, refine rules, and partner with People/HR, Legal, Compliance, Engineering, and IT on data mishandling.

Reporting to the Cyber GRC Lead, you will own DLP engineering and alert operations affecting customer data and trading systems, and you will grow into leading Insider Risk investigations end-to-end.

Qualifications

• 3+ years in DLP, data protection, or adjacent security work with real alert volume.
• Hands-on experience implementing and tuning DLP in SaaS and/or endpoint environments.
• Solid understanding of data classification, PII handling, and common ways data leaves the company by accident.
• Working knowledge of SIEM and log analysis (e.g., ELK/Elastic, Splunk).
• Familiarity with frameworks such as NIST CSF, ISO 27001, SOC 2, and privacy regulations (GDPR, APPI).
• Strong written communication; able to document alerts, coaching outreach, and case notes clearly.

Responsibilities

• Implement, operate, and tune DLP across SaaS, email, endpoints, and collaboration tools.
• Triage and work DLP alerts — determine what fired, why, whether it is real, and what to do next.
• Handle false positives and tune rules so the same noise does not keep coming back.
• Respond to user accidents and data mishandling: educate, correct course, and document what happened.
• Engage employees who share PII or sensitive data in the wrong systems, and help them use approved paths.
• Mature data classification and align DLP controls to sensitivity levels.
• Build and improve detections and monitoring for data movement risk across Google, Slack, cloud, source code, and related systems.
• Work with People/HR, Legal, Compliance, Engineering, and IT on data mishandling and related follow-up.
• Partner with the Cyber GRC Lead on higher-severity Insider Risk and data loss cases, and grow into leading investigations from intake through closure.
• Assess risk from unauthorized AI tooling and sensitive data exposure through approved and unsanctioned AI tools.
• Support audits and regulatory asks tied to DLP and data handling.
• Contribute data handling content to security awareness and training.
• Stay current on DLP, data protection, privacy, and financial services expectations.

Skills

DLP

Data protection

SIEM

ELK

Splunk

Data classification

PII handling

Cross-functional collaboration

Regulatory compliance

Incident response

Tools

Cloud platforms

Python

SQL

Job description

Alpaca is seeking a Data Risk Engineer to implement and tune DLP across SaaS, email, endpoints, and collaboration tools. You will triage alerts, refine rules, and partner with People/HR, Legal, Compliance, Engineering, and IT on data mishandling.

Reporting to the Cyber GRC Lead, you will own DLP engineering and alert operations affecting customer data and trading systems, and you will grow into leading Insider Risk investigations end-to-end.