Senior Data Protection & Insider Threat Engineer

constelliscareers; Herndon (VA); On-site; USD 130,000 - 170,000; Full time

Job summary

Constellis in Herndon, VA seeks a Sr. Security Engineer to lead data protection, classification, and insider threat initiatives across enterprise environments. You will implement advanced controls, support eDiscovery and DLP operations, and investigate potential data misuse.

The role collaborates with Legal, HR, and Compliance to ensure lawful handling of sensitive information, maintain compliance with regulations, and continuously improve protection and governance platforms.

Qualifications

• Bachelor's degree preferred; five additional years of related experience may substitute for a degree.
• 5+ years of experience in data security, DLP, or insider threat investigations.
• Hands-on experience with tools like Microsoft Purview, eDiscovery, and classification tools.
• Experience with SIEM, UEBA, and forensic investigation tools.
• Excellent analytical, communication, and documentation skills.
• U.S. Citizen.
• Ability to obtain and maintain at least a Top Secret clearance.

Responsibilities

• Design and implement data classification frameworks aligned with regulatory and contractual requirements (e.g., CMMC, CUI, DFAR, GDPR, ITAR).
• Manage and optimize Data Loss Prevention (DLP) policies across endpoints, on-premises, cloud services, and email platforms.
• Support eDiscovery workflows, including review set management, legal hold coordination, and audit trail integrity.
• Conduct insider threat investigations using behavioral analytics, audit logs, and forensic tools.
• Collaborate with Legal, HR, and Compliance teams to ensure ethical and lawful handling of sensitive data.
• Maintain and enhance data protection and data governance platforms.
• Develop and document security controls, workflows, and incident response playbooks related to data misuse.
• Monitor regulatory developments and update controls to maintain compliance.
• Actively search all areas of the internal network for hidden threats and vulnerabilities
• Support audits and compliance efforts
• Participate in red/blue/purple team exercises as needed to analyze threat scenarios and assess internal defenses and document results.
• Engage positively across multiple teams to establish clarity, vision, and mutual trust in order to achieve business goals
• Adheres to industry-specific local, state, and federal regulations, as applicable
• Other duties as assignedOther duties as assigned

Skills

Analytical thinking

Communication

Documentation

Education

Bachelor's degree preferred

Tools

Microsoft Purview

eDiscovery

Classification tools

SIEM

UEBA

Forensic investigation tools

Job description

Constellis in Herndon, VA seeks a Sr. Security Engineer to lead data protection, classification, and insider threat initiatives across enterprise environments. You will implement advanced controls, support eDiscovery and DLP operations, and investigate potential data misuse.

The role collaborates with Legal, HR, and Compliance to ensure lawful handling of sensitive information, maintain compliance with regulations, and continuously improve protection and governance platforms.