Senior Security Engineer, Data Loss Prevention

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 33%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Fragomen

Site WebLinkedInTous les Emplois

5001 - 10000 employés

Fondée en 1951

⚖️ Juridique

💼 Conseil

📋 Conformité

Legal • Consulting • Compliance

Fragomen est un cabinet mondial d'avocats spécialisés en immigration, de consultants, et de conseillers offrant des services de mobilité et d'immigration aux employeurs et aux particuliers dans le monde entier. Le cabinet publie des recherches et des analyses (y compris des rapports sur les tendances de l'immigration mondiale et des aperçus régionaux), émet des alertes sur l'immigration, organise des événements et des webinaires, et exploite un Centre de Stratégie et d'Analyses Appliquées pour développer des orientations politiques et de conformité. Fragomen s'engage également dans les partenariats technologiques et stratégiques (par exemple, une joint-venture sur les solutions d'identité numérique) pour soutenir la conformité en matière d'immigration, la mobilité des travailleurs, et les services de conseil connexes.

Description

• Design, implement, and tune enterprise DLP policies across Microsoft 365, endpoint, email, SaaS, cloud, and collaboration platforms • Identify, classify, and protect sensitive information using data classification, sensitivity labels, policy conditions, and enforcement actions • Monitor and investigate DLP alerts involving potential data exposure, improper sharing, data exfiltration indicators, or policy violations • Partner with Legal, Compliance, Privacy, Risk, Records, and business stakeholders to align DLP controls with requirements • Develop and maintain DLP standards, operating procedures, runbooks, exception processes, and escalation workflows • Evaluate and improve controls for OneDrive, SharePoint, Box, Google Drive, Dropbox, ShareFile, NetDocuments, and similar services • Support CASB and SaaS governance efforts by identifying unsanctioned data movement, risky sharing, excessive permissions, and policy-enforcement opportunities • Conduct root-cause analysis on recurring alerts, control gaps, and data-handling issues • Collaborate with security operations, identity, messaging, endpoint, network, and application teams to integrate DLP telemetry into SIEM, SOAR, monitoring, and response processes • Prepare communications for end users, technical teams, stakeholders, and leadership regarding DLP findings, policy changes, and corrective actions • Provide technical guidance and mentorship to junior analysts and security team members • Help mature Fragomen’s enterprise data protection capabilities and strengthen its security posture

🎯 Exigences

• 5+ years of experience in cybersecurity, data protection, security operations, governance, risk, compliance, or related technology roles, or equivalent combination of education and experience • Working knowledge of DLP concepts, sensitive data handling, information protection, data classification, and policy-based enforcement • Hands-on experience supporting or operating enterprise security controls, especially within Microsoft 365, email, endpoint, cloud, or SaaS platforms • Ability to analyze DLP alerts, user activity, sharing patterns, policy matches, and event logs • Working knowledge of identity and access concepts, authentication mechanisms, file permissions, collaboration tooling, and data-sharing workflows • Strong written and verbal communication skills • Ability to follow structured processes while continuously improving them • Knowledge of Microsoft Purview Information Protection and DLP • Knowledge of Microsoft Defender for Cloud Apps and CASB concepts • Knowledge of endpoint, email, and collaboration security controls across Windows, Microsoft 365, Exchange Online, Teams, SharePoint, and OneDrive • Experience with SIEM and security platforms such as Splunk, Microsoft Sentinel, QRadar, ArcSight, ELK, or similar tools • Knowledge of sensitive data types and regulatory drivers, including PII, PCI, PHI, financial data, client confidential information, legal matter data, and regulated business records • Knowledge of TCP/IP, DNS, HTTP/S, VPNs, proxies, firewalls, APIs, and cloud storage patterns • Preferred: experience with Microsoft Purview DLP, Endpoint DLP, Information Protection, Insider Risk Management, eDiscovery, Audit, or Data Lifecycle Management • Preferred: experience with CASB, SaaS security, cloud access governance, or file-sharing risk management • Preferred: experience supporting investigations involving Legal, Compliance, Privacy, Risk, Records, HR, or regulatory stakeholders • Preferred: experience with SOAR, ticketing, workflow automation, and process documentation • Preferred relevant certifications such as Microsoft Security, Compliance, and Identity certifications; CISSP, SSCP, Security+, CISA, CISM; GIAC; or vendor certifications • Successful completion of the Firm’s pre-employment screening process • Legal authorization to work in the offered position’s location

🏖️ Avantages

• Hybrid & Remote work arrangements via the #FragomenWorks program • Three managerial check-ins per year to support career progression • Fragomen Academy • Leadership Academy • Practical Management Academy • Regional Development Conferences • Firmwide health and wellness initiatives • Programs supporting work-life balance • Benefits covering a wide range of well-being needs • Diversity, inclusion, and equal opportunity commitment • Community support and advice for immigrants • Sustainability and corporate social responsibility initiatives