Senior Information Protection & AI Security Engineer

System One, Inc.; Lafayette (LA); On-site; USD 120,000 - 180,000; Full time

Job summary

System One seeks a Senior Information Protection & AI Security Engineer to protect enterprise data, govern AI usage, and strengthen insider risk controls in a highly regulated financial services environment. You will implement and tune Microsoft Purview capabilities, DLP, insider risk, and AI security guardrails across large-scale operations.

The role requires hands-on experience with Microsoft Purview, security automation, and collaboration across Security Operations, Compliance, and

Qualifications

• 8+ years of experience in cybersecurity or enterprise security engineering.
• 5+ years of hands-on Microsoft Purview experience.
• Experience configuring Information Protection, DLP, Insider Risk Management, and sensitivity labels.
• Strong understanding of the Microsoft 365 Security & Compliance ecosystem.
• Experience implementing AI security controls for enterprise GenAI platforms (e.g., Microsoft Copilot).

Responsibilities

• Strengthen information protection controls across enterprise data.
• Improve insider threat detection and data exfiltration controls.
• Securely enable enterprise AI adoption while preventing data leakage and prompt attacks.
• Develop security automation, monitoring, metrics, and runbooks using PowerShell, Graph API, and KQL.

Skills

Cybersecurity

Information protection

AI security

Regulatory compliance

Collaboration

Education

Bachelor's degree

Tools

Microsoft Purview

PowerShell

Microsoft Graph API

KQL

Microsoft Sentinel

Azure

Microsoft Defender

DLP

Job description

Job Title: Senior Information Protection & AI Security Engineer Job Category: Cyber Security Job Type: Permanent Full Time

Description

Senior Information Protection & AI Security Engineer *

Position Description

Seeking a Senior Information Protection & AI Security Engineer to support enterprise data protection, AI governance, and insider risk initiatives within a highly regulated financial services environment. This role will focus on implementing, configuring, and continuously improving Microsoft Purview capabilities, AI security guardrails, and insider threat detection controls.

The engineer will work extensively with Microsoft Purview Information Protection, Data Loss Prevention (DLP), Insider Risk Management, Communication Compliance, and data classification capabilities. Responsibilities also include implementing security and governance controls for Microsoft Copilot and other generative AI platforms to help prevent sensitive data exposure, oversharing, prompt based attacks, and unauthorized AI usage.

This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL

Your Future Duties and Responsibilities

This position works closely with Security Operations, Incident Response, Compliance, Technology, and business teams to strengthen information protection controls, improve insider threat detection, and securely enable enterprise AI adoption. The role also develops security automation, monitoring, metrics, and operational documentation using technologies such as PowerShell, Microsoft Graph API, KQL, Microsoft Sentinel, and the broader Microsoft security ecosystem.

Required Qualifications to be Successful in This Role

• 8+ years of experience in cybersecurity, information protection, data security, or enterprise security engineering, including 5+ years of hands on Microsoft Purview experience.
• Strong hands on experience configuring and tuning Microsoft Purview, including Information Protection, DLP, Insider Risk Management, Communication Compliance, data classification, and sensitivity labels.
• Experience implementing AI security and governance controls for enterprise generative AI platforms, including Microsoft Copilot.
• Knowledge of GenAI security risks such as sensitive data leakage, oversharing, unauthorized AI usage, and prompt injection.
• Experience developing and tuning insider threat and data exfiltration detection policies while improving detection accuracy and reducing false positives.
• Strong understanding of the Microsoft 365 Security and Compliance ecosystem.
• Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Azure, and Microsoft Graph API.
• Ability to develop security and operational automation using PowerShell, Microsoft Graph API, KQL, or similar technologies.
• Experience creating security dashboards, metrics, reporting, standards, procedures, and operational runbooks.
• Strong understanding of information governance, data classification, security controls, and regulatory compliance in large enterprise environments.
• Experience collaborating with Security Operations, Incident Response, Compliance, engineering, and business teams.
• Experience within financial services, regulated industries, or other highly sensitive enterprise environments is strongly preferred.
• Relevant certifications such as SC 400, SC 100, SC 200, SC 300, CISSP, CISM, or GIAC are preferred.

Desired Skillset

Preferred certifications include Microsoft SC 400, SC 100, SC 200, or SC 300, as well as CISSP, CISM, GIAC, or comparable security certifications.

Educational Requirements

Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.

Ref: #404-IT Pittsburgh