Security Engineer II - Data Protection

SECU; North Carolina; Hybrid; USD 90,000 - 120,000; Full time

Job summary

SECU in North Carolina seeks a Data Protection Analyst to help guard member and organizational data. You will triage alerts, tune policies, and create metrics and reporting for leadership to act on, working with the VP of Data Protection and cross-functional Security teams to keep the program sharp.

The role involves leading incident responses for data loss events, monitoring tools like Proofpoint, Zscaler, and Splunk, and maintaining BAU activities.

Qualifications

• 3-5 years in security operations, data protection, or DLP-focused role.
• Hands-on experience with DLP, DSPM, data classification or endpoint detection tools.
• Strong incident response fundamentals: triage, investigation, containment, documentation.
• Ability to translate technical findings into clear reporting for non-technical stakeholders.

Responsibilities

• Monitor, triage, and investigate DLP and data protection alerts across security tools.
• Lead incident response for confirmed data loss events, from detection to resolution.
• Provide operational support for DLP tools and BAU activities.
• Tune and maintain DLP policies to reduce false positives and catch real risk.
• Analyze alert trends and incident data to recommend policy improvements.
• Develop metrics and reporting for leadership visibility on program health.
• Document investigation findings, policy changes, and SOPs.
• Partner with Security, IT, HR, Privacy and business units to close protection gaps.
• Support audits and regulatory requests with organized data protection records.

Skills

DLP tools

DSPM

Data classification

Incident response

Log analysis

Clear communication

Education

IT Security degree

Tools

Proofpoint

Zscaler

Splunk

Job description

If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!

Position Overview

In this role, you'll help protect member and organizational data across our environment - triaging alerts, tuning policies, metrics creation, provide operational support and turning day-to-day findings into clear reporting our leadership can act on. You'll work closely with the VP of Data Protection and partner teams across Security to keep our data loss prevention program sharp and responsive.

Essential Responsibilities

• Monitor, triage, and investigate DLP and data protection alerts across Splunk, Proofpoint, Zscaler, and other security tools
• Lead incident response for confirmed data loss events, from initial detection through resolution and documentation
• Provide operational support for DLP tools and assist in maintaining BAU activities.
• Support, tune, and maintain DLP policies to reduce false positives while catching real risk
• Analyze alert trends and incident data to spot patterns and recommend policy or control improvements
• Develop and maintain metrics and reporting that give leadership a clear view of program health
• Document investigation findings, policy changes, and standard operating procedures
• Partner with Security, IT, HR, Privacy and business units to understand data flows and close protection gaps
• Support audits and regulatory requests with accurate, well-organized data protection records

Required Education & Experience (Knowledge, Skills, & Abilities)

• High School Degree required
• 3-5 years of experience in security operations, data protection, or DLP-focused role
• Hands-on experience with DLP, DSPM, data classification or endpoint detection tools (Proofpoint, Zscaler, or Splunk a strong plus)
• Solid understanding of incident response fundamentals - triage, investigation, containment, documentation
• Comfort digging into logs and alert data to find the story behind the noise
• Clear written communication - you can turn technical findings into reporting non-technical stakeholders understand
• A collaborative, detail-oriented approach and genuine curiosity about how data moves and where it's at risk

Preferred Education & Experience (Knowledge, Skills, & Abilities)

• Associates, Bachelors, or advanced degree in IT Security or related field
• Experience in financial services or another highly regulated industry
• Security certifications such as Security+, GIAC, or CISSP
• Familiarity with building dashboards or metrics reporting for security programs

Job Environment & Physical Requirements

• Hybrid - some in office required

SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.

State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.