Senior DLP Engineer: Data Protection & Insider Risk

Wintrust Financial Corporation; Northern (KY); Hybrid; USD 117,000 - 158,000; Full time

Job summary

Wintrust Financial Corporation is seeking a Senior DLP Engineer to implement and optimize DLP controls across Microsoft Purview, Proofpoint, and CrowdStrike. You will tune detections, test policies, and support insider risk investigations while building automation to improve operational efficiency.

The role requires a Bachelor’s degree or equivalent with 3+ years in information security and hands-on DLP or data protection experience, ideally in regulated environments like financial services.

Qualifications

• Implement and maintain DLP policies across platforms.
• Tune detections with types, dictionaries, classifiers, regex, EDMs, IDMs and contexts.
• Perform policy testing, validation, deployment and change management.
• Review DLP alerts to identify violations and insider risk indicators.
• Support Insider Risk investigations with data movement analysis.
• Develop scripts to automate DLP administration and reporting.
• Integrate DLP with ServiceNow, SIEM and case management systems.

Responsibilities

• Implement and maintain DLP policies across Microsoft Purview, Proofpoint, CrowdStrike, email, endpoints, cloud and collaboration tools.
• Configure detections using sensitive information types, dictionaries, classifiers and regex.
• Test, validate, deploy and manage changes to DLP policies.
• Review alerts to identify policy violations and data exposure events.
• Support Insider Risk investigations with technical data movement analysis.
• Develop automation to improve DLP administration and reporting.
• Assist integration with security platforms such as ServiceNow and SIEM.

Skills

DLP experience

Information security

Security monitoring

Automation scripting

Policy testing

Education

Bachelor’s degree or equivalent

Tools

Microsoft Purview

Proofpoint

CrowdStrike

Job description

Wintrust Financial Corporation is seeking a Senior DLP Engineer to implement and optimize DLP controls across Microsoft Purview, Proofpoint, and CrowdStrike. You will tune detections, test policies, and support insider risk investigations while building automation to improve operational efficiency.

The role requires a Bachelor’s degree or equivalent with 3+ years in information security and hands-on DLP or data protection experience, ideally in regulated environments like financial services.