DLP Engineer

Commvault; United States; On-site; USD 110,000 - 160,000; Full time

Job summary

Commvault seeks a DLP Engineer to design, implement, and continuously improve data protection controls across endpoints, email, network, cloud, collaboration, and AI platforms. This role bridges policy requirements with practical security implementations.

You will collaborate with Compliance, Legal, Privacy, Information Governance, Security Architecture, IAM, Security Operations, and IT to ensure enforcement of data protection standards enterprise-wide.

Responsibilities

• Design, implement, configure, and maintain enterprise data protection technologies and controls.
• Develop and maintain technical solutions that protect sensitive information across endpoints, email systems, cloud environments, collaboration platforms, networks, and AI-enabled technologies.
• Implement controls that reduce the risk of unauthorized disclosure, misuse, exfiltration, or exposure of sensitive organizational data.
• Evaluate emerging data security technologies and recommend solutions that improve organizational security posture.
• Participate in security architecture reviews and provide engineering expertise related to data protection capabilities.
• Partner with Compliance, Privacy, Legal, Information Governance, and Security Policy teams to understand regulatory, contractual, and business requirements.
• Translate policy requirements into technical controls, detection logic, classifications, and enforcement mechanisms.
• Design and implement DLP and information protection policies that align with approved governance requirements.
• Ensure technical implementations accurately reflect business and compliance objectives.
• Provide technical input during policy development and review activities.
• Admin

Job description

We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.

What to know:

• Commvault doesnotconduct interviews by email or text.
• We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day.
• Commvault recruiters may contact prospective candidates through LinkedIn and other professional networking platforms regarding career opportunities. If you are unsure whether a recruiting communication is legitimate, review the profile to ensure they have a badge verifying them as a Commvault employee.

Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data.

The DLP Engineer is responsible for the design, implementation, and continuous improvement of technical controls that protect organizational data across endpoint, email, network, cloud, collaboration, and emerging AI platforms. This role serves as a key member of the Security Engineering team and acts as a bridge between business policy requirements and technical security implementations.

The ideal candidate possesses a strong understanding of data protection principles along with the technical expertise required to translate governance, compliance, privacy, and security policies into effective technical controls. This position focuses on the engineering, configuration, optimization, and maintenance of data protection technologies rather than day-to-day alert monitoring or incident response activities.

The DLP Engineer partners closely with Compliance, Legal, Privacy, Information Governance, Security Architecture, Identity and Access Management, Security Operations, and Information Technology teams to ensure data protection requirements are effectively implemented and enforced across the enterprise.

This role combines project-based work, including deployment of new data protection capabilities and enhancements, with operational responsibilities involving support, maintenance, tuning, and continuous improvement of existing security technologies.

Position Responsibilities:

Data Security Engineering

• Design, implement, configure, and maintain enterprise data protection technologies and controls.
• Develop and maintain technical solutions that protect sensitive information across endpoints, email systems, cloud environments, collaboration platforms, networks, and AI-enabled technologies.
• Implement controls that reduce the risk of unauthorized disclosure, misuse, exfiltration, or exposure of sensitive organizational data.
• Evaluate emerging data security technologies and recommend solutions that improve organizational security posture.
• Participate in security architecture reviews and provide engineering expertise related to data protection capabilities.

Policy Translation and Technical Implementation

• Partner with Compliance, Privacy, Legal, Information Governance, and Security Policy teams to understand regulatory, contractual, and business requirements.
• Translate policy requirements into technical controls, detection logic, classifications, and enforcement mechanisms.
• Design and implement DLP and information protection policies that align with approved governance requirements.
• Ensure technical implementations accurately reflect business and compliance objectives.
• Provide technical input during policy development and review activities.

Security Platform Administration

• Admin