Data Security Engineer

Commvault; United States; On-site; USD 72,000 - 136,000; Full time

Benefits offered by this job

Employee stock purchase plan (ESPP)

Job summary

Commvault is seeking a Data Security Engineer to design, implement, and continuously improve data protection controls across endpoint, email, cloud, and collaboration environments. You will translate governance and privacy requirements into effective security measures and work with Compliance, Legal, and IT teams to strengthen the enterprise security posture.

The role emphasizes engineering and deployment of protections rather than incident response.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or equivalent practical experience.
• 3-5 years of experience in Data Security Engineering, Information Protection, DLP Engineering, Data Protection, or a related security discipline.
• Experience translating business/regulatory requirements into technical security controls.

Responsibilities

• Design, implement, configure, and maintain enterprise data protection technologies and controls.
• Develop and maintain technical solutions that protect sensitive information across endpoints, email systems, cloud environments, collaboration platforms, networks, and AI-enabled technologies.
• Implement controls that reduce the risk of unauthorized disclosure, misuse, exfiltration, or exposure of sensitive organizational data.
• Evaluate emerging data security technologies and recommend solutions that improve organizational security posture.
• Participate in security architecture reviews and provide engineering expertise related to data protection capabilities.
• Partner with Compliance, Privacy, Legal, Information Governance, and Security Policy teams to translate policy requirements into technical controls.

Skills

Data Security Engineering

DLP

Information Protection

Policy Translation

Security Architecture Collaboration

Risk-Based Decision Making

Communication

Education

Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or equivalent practical experience

Tools

PowerShell

Python

Job description

Recruitment Fraud Alert

We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.

What to know:

• Commvault doesnot conduct interviews by email or text.


• We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day.

About Commvault

Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data.

The Data Security Engineer is responsible for the design, implementation, and continuous improvement of technical controls that protect organizational data across endpoint, email, network, cloud, collaboration, and emerging AI platforms. This role serves as a key member of the Security Engineering team and acts as a bridge between business policy requirements and technical security implementations.

The ideal candidate possesses a strong understanding of data protection principles along with the technical expertise required to translate governance, compliance, privacy, and security policies into effective technical controls. This position focuses on the engineering, configuration, optimization, and maintenance of data protection technologies rather than day-to-day alert monitoring or incident response activities.

The Data Security Engineer partners closely with Compliance, Legal, Privacy, Information Governance, Security Architecture, Identity and Access Management, Security Operations, and Information Technology teams to ensure data protection requirements are effectively implemented and enforced across the enterprise.

This role combines project-based work, including deployment of new data protection capabilities and enhancements, with operational responsibilities involving support, maintenance, tuning, and continuous improvement of existing security technologies.

Position Responsibilities:

Data Security Engineering

• Design, implement, configure, and maintain enterprise data protection technologies and controls.


• Develop and maintain technical solutions that protect sensitive information across endpoints, email systems, cloud environments, collaboration platforms, networks, and AI-enabled technologies.


• Implement controls that reduce the risk of unauthorized disclosure, misuse, exfiltration, or exposure of sensitive organizational data.


• Evaluate emerging data security technologies and recommend solutions that improve organizational security posture.


• Participate in security architecture reviews and provide engineering expertise related to data protection capabilities.

Policy Translation and Technical Implementation

• Partner with Compliance, Privacy, Legal, Information Governance, and Security Policy teams to understand regulatory, contractual, and business requirements.


• Translate policy requirements into technical controls, detection logic, classifications, and enforcement mechanisms.


• Design and implement DLP and information protection policies that align with approved governance requirements.


• Ensure technical implementations accurately reflect business and compliance objectives.


• Provide technical input during policy development and review activities.

Security Platform Administration

• Administer and support enterprise data protection and information security platforms.


• Develop and maintain operational procedures, technical documentation, standards, and implementation guides.


• Perform testing, validation, troubleshooting, and tuning of data protection controls to improve effectiveness and reduce false positives.


• Coordinate upgrades, integrations, maintenance activities, and platform lifecycle management.


• Support implementation of new security capabilities and enhancements across the organization.

Cross-Functional Collaboration

• Work closely with Security Architecture teams to align technical controls with enterprise security strategy.


• Partner with Identity and Access Management teams on data-centric access control initiatives.


• Collaborate with Security Operations teams to improve data visibility and detection capabilities.


• Support technology teams and business stakeholders during implementation of data protection requirements.


• Participate in assessments of new applications, cloud services, and AI-enabled platforms to ensure data protection requirements are addressed.

Continuous Improvement

• Analyze effectiveness of existing data protection controls and recommend improvements.


• Identify opportunities for automation and operational efficiencies.


• Assist with development of metrics, reporting, and measurement related to data security capabilities.


• Stay current on emerging threats, technologies, regulatory developments, and industry best practices.


• Contribute to the ongoing maturity of the organization's data protection program.

Position Requirements:

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or equivalent practical experience.


• 3-5 years of experience in Data Security Engineering, Information Protection, DLP Engineering, Data Protection, or a related security discipline.


• Experience implementing and administering enterprise data protection technologies.


• Experience designing and maintaining security controls across endpoint, email, cloud, network, and collaboration environments.


• Understanding of data classification, information governance, privacy, and data protection principles.


• Experience translating business, compliance, privacy, or regulatory requirements into technical security controls.


• Strong troubleshooting and analytical problem-solving skills.


• Experience working with cross-functional teams and multiple stakeholder groups.


• Strong written and verbal communication skills.


• Ability to manage multiple priorities and projects simultaneously.

Preferred Qualifications:

• Experience with Microsoft Purview Information Protection and Data Loss Prevention.


• Experience implementing DLP capabilities across endpoint, email, cloud, network, and SaaS environments.


• Experience with AI governance, AI security controls, or AI-related data protection technologies.


• Knowledge of Microsoft 365 security and compliance capabilities.


• Experience with data classification, sensitivity labeling, and information protection technologies.


• Familiarity with regulatory frameworks such as GDPR, CCPA, HIPAA, PCI-DSS, SOX, or similar standards.


• Experience with Insider Risk Management programs and technologies.


• Familiarity with automation and scripting technologies such as PowerShell or Python.


• Security certifications such as SC-400, CISSP, Security+, SC-300, AZ-500, or equivalent.

Key Competencies:

• Data Security Engineering


• Data Loss Prevention (DLP)


• Information Protection


• Policy-to-Control Translation


• Data Governance Collaboration


• Technical Troubleshooting


• Security Architecture Partnership


• Risk-Based Decision Making


• Communication and Stakeholder Management


• Documentation and Process Development


• Continuous Improvement

You’ll love working here because:

• High income earning opportunities based on self-performance


• Employee stock purchase plan (ESPP)


• Continuous professional development, product training, and career pathing


• Generous global benefits

Pay Range

$72,250 – $135,700 USD

Commvault is an equal opportunity workplace and is an affirmative action employer. We are always committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status and we will not discriminate against on the basis of such characteristics or any other status protected by the laws or regulations in the locations where we work.

Commvault’s goal is to make interviewing inclusive and accessible to all candidates and employees. If you have a disability or special need that requires accommodation to participate in the interview process or apply for a position at Commvault, please email [e-mail] any inquiries not related to an accommodation please reach out [e-mail].

Commvault's Privacy Policy