Staff Data Security Engineer: DLP & DSPM Lead

Reinsurance Group of America, Incorporated; United States; Remote; USD 127,000 - 189,000; Full time

Job summary

Reinsurance Group of America, Incorporated seeks a Staff Data Security Engineer to lead enterprise data protection across Microsoft 365, endpoints, and cloud platforms. You will design, deploy, and tune DLP policies, labeling, and integration with Defender, MDCAS, and Sentinel to monitor risks and protect sensitive data.

Collaborating with IT, Legal, and Compliance, you’ll establish data handling standards, runbooks, and SOPs while extending DSPM coverage to third-party SaaS and on‑premises

Qualifications

• Bachelor’s degree or equivalent experience required.
• 6+ years in information security with 4+ years in data security/DLP/DSPM.
• Proficiency with Microsoft 365 DLP, Defender XDR, and data protection tooling.

Responsibilities

• Design, deploy, and tune DLP policies across Microsoft 365 and endpoints.
• Configure labeling policies, EDM, and trainable classifiers for sensitive data.
• Integrate DLP with Defender, MDCAS, Sentinel, and cloud apps for real-time monitoring.
• Monitor incidents, perform root-cause analysis, and refine policies to reduce false positives.
• Extend DSPM coverage to third‑party SaaS, on‑prem, and network egress points.
• Collaborate with IT, Legal, Compliance to enforce data handling standards.
• Create documentation, runbooks, and SOPs for the Data Security program.
• Provide regular data risk reporting and security metrics for leadership.

Skills

Microsoft Purview DLP

Defender for Endpoint

Microsoft Sentinel

Varonis

DSPM concepts

Data classification

DLP across vectors

Email authentication

Analytical thinking

Security governance

Education

Bachelor’s degree in Arts/Sciences

Tools

Microsoft Purview

Microsoft Defender

Microsoft Sentinel

Varonis Data Security

Job description

Reinsurance Group of America, Incorporated seeks a Staff Data Security Engineer to lead enterprise data protection across Microsoft 365, endpoints, and cloud platforms. You will design, deploy, and tune DLP policies, labeling, and integration with Defender, MDCAS, and Sentinel to monitor risks and protect sensitive data.

Collaborating with IT, Legal, and Compliance, you’ll establish data handling standards, runbooks, and SOPs while extending DSPM coverage to third-party SaaS and on‑premises