Senior DLP Architect & Engineer – Enterprise Security

Brown Brothers Harriman; Philadelphia (Philadelphia County); On-site; USD 110,000 - 160,000; Full time

Job summary

Brown Brothers Harriman (BBH) is seeking an experienced Senior Data Loss Prevention (DLP) Architect & Engineer to join our Cybersecurity organization. This dual-function role combines hands-on engineering with architectural design responsibilities in a highly regulated financial services environment.

You will build automated event monitoring and response pipelines that integrate with our security operations, collaborating with Legal, Risk, Compliance, and Engineering teams to protect sensitive

Qualifications

• 8+ years in information security with 5+ years in DLP architecture and leadership.
• Experience designing and deploying network, endpoint, and cloud DLP in large enterprises.
• Certifications such as CISSP/CISM/CCSP/GIAC are desirable.

Responsibilities

• Design and continuously improve enterprise DLP architecture across network, endpoint, email and cloud.
• Lead PoC evaluations, tool assessments, and architecture roadmap planning.
• Engineer end-to-end DLP monitoring pipelines and SIEM integration.
• Provide governance, metrics, and audit evidence for regulatory requirements.

Skills

DLP Architecture

Zscaler DLP

Security Architecture

Executive communication

Education

Bachelor's degree in Computer Science/Information Security/IT

Master's degree in Cybersecurity or related field (preferred)

Tools

Proofpoint DLP

Microsoft Purview DLP

Microsoft Defender XDR

Splunk ES/SIEM

Job description

Brown Brothers Harriman (BBH) is seeking an experienced Senior Data Loss Prevention (DLP) Architect & Engineer to join our Cybersecurity organization. This dual-function role combines hands-on engineering with architectural design responsibilities in a highly regulated financial services environment.

You will build automated event monitoring and response pipelines that integrate with our security operations, collaborating with Legal, Risk, Compliance, and Engineering teams to protect sensitive