Security Engineer

The Phoenix Group®; New York (NY); On-site; USD 130,000 - 210,000; Full time

Job summary

The Phoenix Group® is seeking an experienced data protection leader in New York to own the DLP posture program, from policy design to alert investigation and continuous improvement. You will collaborate with Legal, Compliance, and IT to reduce data leakage exposure and drive ongoing risk remediation.

You will manage DLP tools across on-prem and cloud environments (Slack, Google Workspace, Microsoft 365) and oversee AI data governance controls to enable safe use of generative AI.

Qualifications

• Experience in enterprise data loss prevention within regulated security environments (PCI, HIPAA/PHI, ITAR, IP, or PII).
• Direct experience with DLP tools such as CrowdStrike Falcon Data Protection, Varonis, or comparable platforms, including policy configuration, alert investigation, and tuning.
• Familiarity with DSPM concepts and tooling.

Responsibilities

• Lead DLP posture management using DSPM tools to locate, classify, and evaluate sensitive data at rest and cleanup of excessive access rights.
• Own data classification framework and ensure findings feed risk reporting and remediation tracking.
• Oversee DLP for Cloud and on-premises across Slack, Google Workspace, and SaaS applications; build and maintain retention policies.
• Administer AI Detection & Response (AIDR) and Guardian DLP controls for safe AI use.
• Develop policies, SOPs, and runbooks for the data protection stack and align with regulatory requirements.

Skills

DLP expertise

Regulatory compliance

Policy design

Threat detection tuning

Education

Bachelor's degree in CS/IT

Tools

Varonis

CrowdStrike Falcon Data Protection

Slack

Google Workspace

Microsoft 365

AI governance tools

Job description

Overview

You will be the primary technical owner of our data loss prevention and data security posture programs, from policy design and tuning through alert investigation and ongoing improvement. Reporting to the head of Information Security, you will work closely with Legal, Compliance, and IT to lower the organization's exposure to data leakage.

Key Responsibilities

Data Loss Prevention & Posture Management

• Run Varonis DSPM to locate, classify, and evaluate sensitive data at rest, and lead cleanup of excessive access rights, outdated data, and configuration issues.
• Own the data classification framework and make sure posture findings flow into enterprise risk reporting and remediation tracking.
• Manage CrowdStrike Falcon Data Protection for Endpoint, including writing and refining detection and blocking rules, reviewing alerts, and cutting down noise while addressing true exfiltration risks.
• Oversee Falcon Data Protection for Cloud to discover, label, and monitor sensitive information in cloud storage and SaaS applications.
• Build and maintain DLP and retention policies in Slack and Google Workspace covering messages, channels, DMs, and shared files.
• Administer AI Detection & Response (AIDR) and Guardian DLP controls that govern sensitive data moving to and from generative AI tools, helping the business adopt AI safely.
• Support retention and eDiscovery efforts by setting retention schedules, applying legal holds, and helping Legal and Compliance preserve and collect data across Varonis, cloud, Slack, email, and other systems.

Program Ownership & Collaboration

• Regularly review data protection coverage and propose new controls or adjustments where gaps exist.
• Deliver recurring metrics and reports to leadership on DLP events, policy performance, and overall data risk.
• Work with IT, Legal, Compliance, and business teams to keep data handling aligned with internal policy and regulatory requirements.
• Write and maintain policies, SOPs, and response playbooks for the data protection stack.
• Keep up with developments in DLP, DSPM, AI governance, and related threats.

What We're Looking For

• Experience working in enterprise data loss prevention within a regulated security environment (PCI, HIPAA/PHI, ITAR, IP, or PII).
• Direct experience with DLP tools such as CrowdStrike Falcon Data Protection, Varonis, or comparable platforms, including policy configuration, alert investigation, and tuning.
• Working knowledge of DSPM concepts and tooling.
• Experience securing SaaS and collaboration platforms (Slack, Microsoft 365, Google Workspace) and managing their DLP and retention settings.
• Solid understanding of records retention, legal hold, and eDiscovery and how they connect to technical controls.
• Exposure to AI governance or protecting data shared with generative AI tools is highly valued.
• Certifications such as CIPP, CISSP, or other privacy credentials are nice to have, not required.