Principal Security Engineer -DLP AI Security Automation

Citizens; Woodbridge Township (NJ); Hybrid; USD 175,000 - 250,000; Full time

Benefits offered by this job

Comprehensive benefits

Flexible work arrangements

Education reimbursement

Parental leave

Job summary

Citizens seeks a Principal Security Engineer to drive AI-enabled DLP automation and lead enterprise DLP strategy across cloud, endpoints, SaaS, and emerging AI environments. You will own design, deployment, and optimization of DLP controls, and mentor teams while collaborating with risk, IT, and business units in a hybrid work model.

The role requires 8+ years in information security with 4+ years in DLP/CASB, strong policy design, and hands-on experience with diverse data protection

Qualifications

• Bachelor’s degree or equivalent experience in Computer Science, Cybersecurity, or related field.
• 8+ years experience in information security, including 4+ years in DLP, CASB, or cloud data protection engineering.
• Deep hands on expertise with DLP platforms including policy design, deployment, and operations.
• Experience integrating DLP and CASB with SIEM, SOAR, identity, and cloud platforms.
• Proven experience building automation or AI driven workflows for security operations.
• Strong knowledge of regulatory frameworks such as GLBA, PCI DSS, SOX, FFIEC, GDPR, CCPA.
• Strong analytical and troubleshooting skills across hybrid environments.
• Excellent communication skills translating technical concepts for varied audiences.

Responsibilities

• Deploy and operationalize AI driven DLP automation, including agent based triage, contextual risk assessment, and automated remediation.
• Leverage AI powered classification, adaptive protection, and insider risk capabilities to build proactive data protection workflows.
• Design automation pipelines to reduce manual triage, lower false positives, and accelerate incident resolution.
• Evaluate and integrate emerging AI and ML capabilities to improve DLP effectiveness and operational efficiency.
• Lead end to end design, deployment, and optimization of DLP controls across CASB, Information Protection, and DSPM platforms.
• Architect unified DLP policies across endpoints, SaaS, IaaS, email, and network traffic within SSE environments.
• Define security requirements, architecture patterns, and integration blueprints for enterprise DLP solutions across cloud and hybrid environments.
• Develop and enforce DLP policies aligned to regulatory requirements such as GLBA, PCI DSS, SOX, GDPR.

Skills

DLP engineering

AI automation

Cloud security

CASB

SIEM integration

Regulatory compliance

Leadership

Stakeholder communication

Education

Bachelor’s degree in CS/Cybersecurity or related field

Tools

Python

PowerShell

KQL

SIEM tooling

Job description

Principal Security Engineer, DLP AI Automation, Platform Integration

Location: Hybrid – 4 days onsite, 1 remote in one of the following hubs: Johnston, RI | Boston, MA | Iselin, NJ | Pittsburgh, PA | Manchester, NH

Summary

Lead the design, deployment, and expansion of enterprise Data Loss Prevention capabilities with a focus on AI driven automation. Own DLP platform integration and strategy across cloud, endpoint, SaaS, and emerging AI environments, driving scalable, automated data protection that reduces risk and enables secure innovation.

Key Responsibilities

AI Automation and Intelligent Operations

• Deploy and operationalize AI driven DLP automation, including agent based triage, contextual risk assessment, and automated remediation
• Leverage AI powered classification, adaptive protection, and insider risk capabilities to build proactive data protection workflows
• Design automation pipelines to reduce manual triage, lower false positives, and accelerate incident resolution
• Evaluate and integrate emerging AI and ML capabilities to improve DLP effectiveness and operational efficiency

DLP Architecture and Deployment

• Lead end to end design, deployment, and optimization of DLP controls across CASB, Information Protection, and DSPM platforms
• Architect unified DLP policies across endpoints, SaaS, IaaS, email, and network traffic within SSE environments
• Define security requirements, architecture patterns, and integration blueprints for enterprise DLP solutions across cloud and hybrid environments

Policy Development, Tuning, and Compliance

• Develop and enforce DLP policies aligned to regulatory requirements such as GLBA, PCI DSS, SOX, GDPR
• Continuously tune rules, classifiers, sensitive information types, and exception workflows to improve detection accuracy
• Apply risk frameworks to identify and mitigate data protection gaps
• Maintain documentation, runbooks, and audit evidence for compliance reviews

Leadership and Collaboration

• Serve as the technical lead for DLP AI automation initiatives
• Partner across cybersecurity, risk, IT, and business teams to align data protection strategy
• Mentor engineers and promote operational excellence and continuous learning
• Oversee design, integration, testing, and delivery of data protection solutions
• Present program insights and recommendations to senior leadership

Required Qualifications

• Bachelor’s degree or equivalent experience in Computer Science, Cybersecurity, or related field
• 8+ years experience in information security, including 4+ years in DLP, CASB, or cloud data protection engineering
• Deep hands on expertise with DLP platforms including policy design, deployment, and operations
• Experience integrating DLP and CASB with SIEM, SOAR, identity, and cloud platforms
• Proven experience building automation or AI driven workflows for security operations
• Strong knowledge of regulatory frameworks such as GLBA, PCI DSS, SOX, FFIEC, GDPR, CCPA
• Strong analytical and troubleshooting skills across hybrid environments
• Excellent communication skills translating technical concepts for varied audiences

Preferred Qualifications

• Experience with agent based DLP automation and autonomous remediation capabilities
• Familiarity with AI driven security tooling including AI risk and readiness platforms
• Experience with additional data protection technologies
• Scripting or automation experience such as Python, PowerShell, or KQL
• Certifications such as CISSP, CCSP, CISM
• Experience in financial services or other regulated industries
• Experience with SIEM analytics, dashboards, and DLP telemetry correlation
• Cloud security experience across AWS, Azure, or GCP

Core Skills

• DLP and data protection engineering, advanced, designs and operates enterprise DLP across cloud, endpoint, and network
• AI and automation in security, advanced, applies AI driven workflows to enhance detection and response
• Cloud security and CASB, advanced, secures SaaS and cloud environments
• Compliance and regulatory controls, advanced, aligns DLP strategy with regulatory requirements
• Cybersecurity strategy, advanced, connects data protection initiatives to business priorities
• Emerging technologies, advanced, evaluates and implements new AI and security capabilities
• Systems integration and management, advanced, integrates security platforms across the enterprise
• Incident and problem management, advanced, leads investigation and resolution of data security events
• Stakeholder engagement and communication, advanced, communicates risk and strategy to leadership
• Innovation and continuous improvement, advanced, drives automation and program optimization

Why Join Us

• Lead cutting edge AI driven data protection initiatives shaping how the organization secures sensitive data
• Work in a collaborative, innovation focused environment with strong executive visibility
• Directly influence secure adoption of AI and cloud technologies
• Competitive compensation, strong benefits, and support for professional growth

Pay Transparency

The salary range for this position is $175,000 to $250,000 per year, plus an opportunity to earn additional incentive earnings. Actual pay is based on various factors including, but not limited to, the budget, work location, and relevant skills and experience.

Benefits

Comprehensive benefits include medical, dental, and vision coverage, retirement plans, parental leave, flexible work arrangements, education reimbursement, wellness programs, and generous paid time off exceeding local requirements.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.

Why Work for Us

At Citizens, you'll find a customer‑centric culture built around helping our customers and giving back to our local communities. When you join our team, you are part of a supportive and collaborative workforce, with access to training and tools to accelerate your potential and maximize your career growth

Background Check

Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.