Senior Information Protection & AI Security Engineer

System One; Birmingham (AL); On-site; USD 120,000 - 190,000; Full time

Job summary

System One seeks a Senior Information Protection & AI Security Engineer to advance data protection, AI governance, and insider risk initiatives within a regulated financial services setting. You will implement and optimize Microsoft Purview capabilities, guardrails for AI security, and insider threat controls.

The role focuses on Purview Information Protection, DLP, Insider Risk Management, and data classification, including security for Copilot and other generative AI platforms.

Qualifications

• 8+ years of cybersecurity/enterprise security engineering experience.
• 5+ years hands-on Microsoft Purview experience.
• Experience configuring Purview Information Protection, DLP, Insider Risk, Classification, and labels.
• Experience implementing AI security and governance for enterprise generative AI platforms.
• Knowledge of GenAI security risks and prompt injection.
• Experience developing insider threat and data exfiltration detection policies.
• Familiarity with Microsoft 365 Security and Compliance ecosystem.
• Experience with Defender, Sentinel, and Graph API.
• Ability to develop security automation using PowerShell, Graph API, or similar.
• Experience creating security dashboards, metrics, and runbooks.

Responsibilities

• Support data protection, AI governance, and insider risk initiatives in a regulated financial services environment.
• Configure and continuously improve Microsoft Purview capabilities, AI guardrails, and threat detection controls.
• Work with Purview Information Protection, DLP, Insider Risk Management, and data classification tools.
• Implement security and governance controls for Microsoft Copilot and generative AI platforms.
• Collaborate with Security Operations, Incident Response, Compliance, and business teams to strengthen information protection.
• Develop security automation, monitoring, and operational documentation using PowerShell, Graph API, KQL, and Sentinel.
• Create security dashboards, metrics, reporting, standards, procedures, and runbooks.

Skills

Microsoft Purview

AI security

Insider risk

PowerShell

Microsoft Graph API

KQL

Microsoft Sentinel

DLP

Security Operations

Data governance

Education

Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Systems, or related field

Tools

Microsoft Purview

Azure

Entra ID

CISSP/CISM/GIAC (certs)

Job description

Job Title: Senior Information Protection & AI Security Engineer
Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL
Type: Permanent Fulltime

Overview
Seeking a Senior Information Protection & AI Security Engineer to support enterprise data protection, AI governance, and insider risk initiatives within a highly regulated financial services environment. This role will focus on implementing, configuring, and continuously improving Microsoft Purview capabilities, AI security guardrails, and insider threat detection controls.
The engineer will work extensively with Microsoft Purview Information Protection, Data Loss Prevention (DLP), Insider Risk Management, Communication Compliance, and data classification capabilities. Responsibilities also include implementing security and governance controls for Microsoft Copilot and other generative AI platforms to help prevent sensitive data exposure, oversharing, prompt-based attacks, and unauthorized AI usage.
This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL

Responsibilities

• Support enterprise data protection, AI governance, and insider risk initiatives within a highly regulated financial services environment.
• Implement, configure, and continuously improve Microsoft Purview capabilities, AI security guardrails, and insider threat detection controls.
• Work extensively with Microsoft Purview Information Protection, Data Loss Prevention (DLP), Insider Risk Management, Communication Compliance, and data classification capabilities.
• Implement security and governance controls for Microsoft Copilot and other generative AI platforms to prevent sensitive data exposure, oversharing, prompt-based attacks, and unauthorized AI usage.
• Collaborate with Security Operations, Incident Response, Compliance, Technology, and business teams to strengthen information protection controls and improve insider threat detection.
• Develop security automation, monitoring, metrics, and operational documentation using PowerShell, Microsoft Graph API, KQL, Microsoft Sentinel, and the broader Microsoft security ecosystem.
• Create security dashboards, metrics, reporting, standards, procedures, and operational runbooks.

Requirements

• 8+ years of experience in cybersecurity, information protection, data security, or enterprise security engineering, including 5+ years of hands‑on Microsoft Purview experience.
• Strong experience configuring and tuning Microsoft Purview, including Information Protection, DLP, Insider Risk Management, Communication Compliance, data classification, and sensitivity labels.
• Experience implementing AI security and governance controls for enterprise generative AI platforms, including Microsoft Copilot.
• Knowledge of GenAI security risks such as sensitive data leakage, oversharing, unauthorized AI usage, and prompt injection.
• Experience developing and tuning insider threat and data exfiltration detection policies while improving detection accuracy and reducing false positives.
• Understanding of the Microsoft 365 Security and Compliance ecosystem.
• Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Azure, and Microsoft Graph API.
• Ability to develop security and operational automation using PowerShell, Microsoft Graph API, KQL, or similar technologies.
• Experience creating security dashboards, metrics, reporting, standards, procedures, and operational runbooks.
• Strong understanding of information governance, data classification, security controls, and regulatory compliance in large enterprise environments.
• Experience collaborating with Security Operations, Incident Response, Compliance, engineering, and business teams.
• Experience within financial services, regulated industries, or other highly sensitive enterprise environments is strongly preferred.
• Relevant certifications such as SC 400, SC 100, SC 200, SC 300, CISSP, CISM, or GIAC are preferred.
• Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.

Desired Skillset: Preferred certifications include Microsoft SC 400, SC 100, SC 200, or SC 300, as well as CISSP, CISM, GIAC, or comparable security certifications.
Educational Requirements: Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.

#M-
#LI-

Ref: #404-IT Pittsburgh