Enterprise DLP Engineer: Data Protection & AI Guardrails

Everpure; Lehi, Santa Clara (UT, CA); On-site; USD 205,000 - 308,000; Full time

Benefits offered by this job

Flexible time off

Wellness resources

Company-sponsored team events

Job summary

Everpure is seeking a Security Operations Data Loss Prevention Engineer to own enterprise DLP strategy across endpoints, networks, cloud, and AI environments. You will establish data governance, protect sensitive assets, and lead investigations while partnering with Engineering, Legal, Privacy, DevSecOps, and GISO leadership.

The role emphasizes detecting and preventing data exfiltration, building high-fidelity detections, and driving continuous improvement.

Qualifications

• Enterprise DLP ownership across architecture, deployment, policy design, tuning, and operations.
• Hands-on experience with enterprise DLP technologies (Purview, Zscaler, Netskope, etc.).
• Experience with data discovery, classification, and cloud protection controls.
• Ability to design, tune, and maintain high-fidelity DLP detections and SIEM/SOAR integration.
• Knowledge of data protection frameworks (NIST CSF, ISO 27001, SOC 2, GDPR, CCPA, PCI DSS, HIPAA).
• Strong communication to translate risks into business outcomes and balance controls with user experience.

Responsibilities

• Architect enterprise DLP strategy end-to-end across endpoints, network, SaaS, apps, cloud, and AI environments.
• Establish data standards, governance, and a sensitive-data map with data owners.
• Protect endpoints (macOS, Windows, Linux) and physical channels; define device disposal and media sanitization needs.
• Protect network, applications, and cloud data; define egress inspection and encrypted-flow visibility.
• Guard AI workflows and sensitive assets; address prompt content and build-system secrets.
• Build detections and automate response; develop SIEM queries and SOAR integrations.
• Lead investigations into data-loss events; brief Legal, Privacy, HR, and leadership; maintain runbooks and diagrams.
• Work from Santa Clara or Lehi office in compliance with Everpure policies.

Skills

Enterprise DLP ownership

Technical DLP expertise

Detection engineering

Data discovery & cloud protection

Automation & investigation

Security & privacy frameworks

Communication & judgment

Tools

Microsoft Purview

Zscaler

Netskope

Forcepoint

Broadcom/Symantec

Trellix

CrowdStrike Data Protection

Job description

Everpure is seeking a Security Operations Data Loss Prevention Engineer to own enterprise DLP strategy across endpoints, networks, cloud, and AI environments. You will establish data governance, protect sensitive assets, and lead investigations while partnering with Engineering, Legal, Privacy, DevSecOps, and GISO leadership.

The role emphasizes detecting and preventing data exfiltration, building high-fidelity detections, and driving continuous improvement.