Security Engineer - Data Protection & DSPM Specialist

The Phoenix Group®; New York (NY); On-site; USD 130,000 - 210,000; Full time

Job summary

The Phoenix Group® is seeking an experienced data protection leader in New York to own the DLP posture program, from policy design to alert investigation and continuous improvement. You will collaborate with Legal, Compliance, and IT to reduce data leakage exposure and drive ongoing risk remediation.

You will manage DLP tools across on-prem and cloud environments (Slack, Google Workspace, Microsoft 365) and oversee AI data governance controls to enable safe use of generative AI.

Qualifications

• Experience in enterprise data loss prevention within regulated security environments (PCI, HIPAA/PHI, ITAR, IP, or PII).
• Direct experience with DLP tools such as CrowdStrike Falcon Data Protection, Varonis, or comparable platforms, including policy configuration, alert investigation, and tuning.
• Familiarity with DSPM concepts and tooling.

Responsibilities

• Lead DLP posture management using DSPM tools to locate, classify, and evaluate sensitive data at rest and cleanup of excessive access rights.
• Own data classification framework and ensure findings feed risk reporting and remediation tracking.
• Oversee DLP for Cloud and on-premises across Slack, Google Workspace, and SaaS applications; build and maintain retention policies.
• Administer AI Detection & Response (AIDR) and Guardian DLP controls for safe AI use.
• Develop policies, SOPs, and runbooks for the data protection stack and align with regulatory requirements.

Skills

DLP expertise

Regulatory compliance

Policy design

Threat detection tuning

Education

Bachelor's degree in CS/IT

Tools

Varonis

CrowdStrike Falcon Data Protection

Slack

Google Workspace

Microsoft 365

AI governance tools

Job description

The Phoenix Group® is seeking an experienced data protection leader in New York to own the DLP posture program, from policy design to alert investigation and continuous improvement. You will collaborate with Legal, Compliance, and IT to reduce data leakage exposure and drive ongoing risk remediation.

You will manage DLP tools across on-prem and cloud environments (Slack, Google Workspace, Microsoft 365) and oversee AI data governance controls to enable safe use of generative AI.