data security engineer

Booz Allen Hamilton

<div>Data Security Engineer
The Opportunity:
Architect, deploy, and configure data security solutions across various clients for DoD, IC, and civilian federal clients. Create new architectures to meet client requirements adhering to Zero Trust best practices and IC data header guidelines. Interface with key stakeholders, including agency personnel and internal delivery and engineering teams. Assist in building custom policy to ensure positive control of data across hybrid cloud environments.
You Have:
<ul><li>3+ years of experience designing, deploying, and configuring data security solutions</li><li>
Experience with Data Security Posture Management (DSPM) tools such as Varonis or BigID</li><li>
Experience with Data Loss Prevention (DLP) tools such as Forcepoint, Trellix, or Symantec</li><li>
Experience with data labeling and tagging solutions such as Purview, Fortra, or Titus</li><li>
Experience documenting and diagraming technical architectures</li><li>
Secret clearance</li><li>
HS diploma or GED</li></ul>
Nice If You Have:
<ul><li>Experience working in federal, DoD, or IC agency environments</li><li>
Experience managing and maintaining containerization solutions</li><li>
Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems</li><li>
Knowledge of Trusted Data Format (TDF) and Attribute Based Access Control (ABAC)</li><li>
Knowledge of Virtru Data Security Platform (DSP) and Keycloak</li><li>
Top Secret clearance</li><li>
Bachelor's degree in an IT, Cybersecurity, or Engineering field</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Data Security Engineer

<div>Data Security Engineer, Mid
The Opportunity:
Architect, deploy, and configure data security solutions across various clients for DoD, IC, and civilian federal clients. Create new architectures to meet client requirements adhering to Zero Trust best practices and IC data header guidelines. Interface with key stakeholders, including agency personnel and internal delivery and engineering teams. Assist in building custom policy to ensure positive control of data across hybrid cloud environments.
You Have:<ul><li>
Experience in a professional work environment</li><li>
Knowledge of Data Loss Prevention concepts and capabilities</li><li>
Knowledge of Data Protection and Data Security concepts</li><li>
Knowledge of policy creation, deployment and troubleshooting</li><li>
Knowledge of container services such as Kubernetes</li><li>
Knowledge of documenting and diagraming technical architectures</li><li>
Ability to demonstrate a desire to learn new capabilities across the data protection market</li><li>
Secret clearance</li><li>
HS diploma or GED</li></ul>
Nice If You Have:<ul><li>
Knowledge of Trusted Data Format (TDF) and Attribute-Based Access Control (ABAC) concepts</li><li>
Knowledge of Virtru Data Security Platform (DSP) or identity solutions such as Keycloak</li><li>
Knowledge of federal, DoD, or IC environments or compliance frameworks</li><li>
Bachelor&rsquo;s degree in IT, Cybersecurity, Engineering, or a related field</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Data Security Engineer, Mid

Leidos

<div>Description
Leidos is seeking a highly specialized Data Security Engineer (DRM Specialist) to serve as the subject matter expert for encryption standards and Digital Rights Management (DRM) within the USSOCOM Zero Trust program. While other engineers handle general labeling, your role is to ensure that the data itself is mathematically protected and self-defending, regardless of where it travels.
As the Senior DRM Specialist, you will be responsible for the configuration and enforcement of advanced encryption policies using Kiteworks (on SIPR and Top-Secret networks) and Microsoft Purview Information Protection (on NIPR). You will move the Command beyond simple file encryption to a granular, identity-aware protection model. You will design the &quot;Data Policy Engine&quot; rules that act as the Policy Decision Point (PDP), ensuring that a user&rsquo;s ability to decrypt a file is dynamically brokered in real-time based on their &quot;Trust Attributes&quot; (clearance, role, and risk level). You will also manage the complex Key Management lifecycles required to maintain a seamless user experience in a high-security, hybrid environment.
Responsibilities<ul><li>
Enterprise DRM Architecture: Architect and configure the Kiteworks Private Content Network (SIPR/Top Secret) and Microsoft Purview (NIPR) to serve as the central Policy Decision Points (PDP) for file access.</li><li>
ABAC Policy Design: Translate NIST 8112 metadata attributes into concrete DRM policies (e.g., &quot;Allow View ONLY if User.Clearance &gt;= TopSecret AND Device.State = Compliant&quot;).</li><li>
Key Management: Manage the lifecycle of encryption keys (Bring Your Own Key - BYOK, Customer Managed Keys) ensuring FIPS 140-2/3 compliance and availability across hybrid and air-gapped environments.</li><li>
Secure Collaboration: Configure advanced DRM features such as SafeVIEW and SafeEDIT in Kiteworks to allow users to view and edit sensitive documents in a secure, containerized stream without the data ever leaving the controlled repository.</li><li>
Policy Enforcement: Define and enforce &quot;Rights Management&quot; controls, specifically preventing actions like Copy/Paste, Screen Capture, and Printing for documents tagged with specific sensitivity labels (e.g., CUI, Secret/NoForn).</li></ul>
Qualifications
Security Clearance: Active Top-Secret clearance with SCI eligibility (TS/SCI).
Education: Master of Science (MS) degree in Cybersecurity, Computer Science, Mathematics (Cryptography focus), or a related technical field.
Experience: 10+ years of related technical experience.
Required Experience &amp; Skills:<ul><li>
DRM Expertise: Extensive hands-on experience (5+ years) designing and administering Enterprise Digital Rights Management (EDRM) or Information Rights Management (IRM) systems, specifically Kiteworks, Microsoft Azure Information Protection (AIP/RMS), or Virtru.</li><li>
Encryption Standards: Deep understanding of cryptographic protocols (AES-256, RSA), Public Key Infrastructure (PKI), and Key Management Service (KMS) operations.</li><li>
Policy Logic: Proven ability to design complex Attribute-Based Access Control (ABAC) logic and Conditional Access policies.</li><li>
Cross-Domain Knowledge: Understanding of how encryption travels across Cross-Domain Solutions (CDS) and the challenges of key management in air-gapped networks.</li><li>
Certification Required: CompTIA Security+ CE (or higher) to meet DoD 8570 IAT Level II requirements.</li></ul>
Preferred Qualifications:<ul><li>
Experience with Hardware Security Modules (HSM) (e.g., Thales, Entrust).</li><li>
Knowledge of NIST SP 800-53 controls related to System and Information Integrity (SI) and Media Protection (MP).</li><li>
Experience integrating DRM tools with SailPoint for identity attribute consumption.</li><li>
Kiteworks Administrator Certification.</li></ul>
Preferred Certifications:<ul><li>
Microsoft Information Protection Administrator (SC-400).</li><li>
Certified Information Systems Security Professional (CISSP).</li></ul>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.<h2 class="jobSectionHeader">
Original Posting:</h2>
March 18, 2026 
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2 class="jobSectionHeader"> 
Pay Range:</h2>
Pay Range $131,300.00 - $237,350.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</div>

Data Security Engineer (DRM Specialist)

Rocket Lawyer

<div><div><div>About Rocket Lawyer</div>
<div></div>
<div>We believe everyone deserves access to affordable and simple legal services. Founded in 2008, Rocket Lawyer is the largest and most widely used online legal service platform in the world. With offices in North America, South America, and Europe, Rocket Lawyer has helped over 30 million people create over 50 million legal documents, and get their legal questions answered.</div>
<div></div>
<div>We are in a unique position to enhance and expand the Rocket Lawyer platform to a scale never seen before in the company's history, to capture audiences worldwide. We are expanding our team to take on this challenge!</div></div>
About your role

Rocket Lawyer's customer data is the company's most important asset, and we need to continue maintaining the security and privacy of this data to ensure delighted customers and a successful business. As a seasoned data security and privacy engineer, you will play a critical role in designing, building, and scaling the systems, processes, and controls that protect the company and our users' data and ensure trust in our products. Working as part of the Security team, you will partner closely with Engineering, Legal, and cross-functional stakeholders to embed privacy-by-design principles into our infrastructure and translate regulatory requirements into scalable technical solutions. You'll bring to the role a passion for architecting and operating a secure data storage system.

This is a hands-on role for a senior individual contributor who thrives at the intersection of security, privacy, and data infrastructure. You will shape how we discover, classify, and protect information, lead privacy risk mitigation efforts, and help evolve our data security capabilities as the company grows and our AI product flourishes. The ideal candidate will be a seasoned data security and privacy expert with exposure to AI-integrated systems to understand the complexities of data security as it relates to AI.

How you will make a difference day to day

Data Discovery, Classification, and Mapping
<ul>
<li>Design and implement data classification and handling frameworks to provide appropriate protection throughout the data lifecycle.
</li>
<li>Build and maintain comprehensive data inventories and data flow maps, identifying where data resides and how it is processed across systems.
</li>
<li>Collaborate with Engineering teams to apply appropriate controls at every point in the data pipeline.
</li>
<li>Understand the need for encryption, implement it where possible, and implement all appropriate safeguards to ensure keys are both kept secure and available to prevent data exfiltration and loss.
</li>
</ul>Privacy by Design and Technical Enablement
<ul>
<li>Partner with Engineering, Legal, Product, IT, and other cross-functional stakeholders to design and embed privacy and data protection principles across the entire organization, from product development to operations.
</li>
<li>Partner with Stakeholders to translate legal and regulatory obligations into actionable technical requirements, policies, and controls.
</li>
<li>Develop privacy-enhancing capabilities such as data minimisation, anonymisation, and access-control frameworks that scale with our infrastructure.
</li>
<li>Work with AI teams to ensure that architectural designs are reviewed and threat modeled to minimize data privacy risk.
</li>
</ul>Risk Assessment, Monitoring, and Compliance Execution
<ul>
<li>Conduct technical risk assessments of internal and third-party systems and applications to identify, evaluate, and mitigate privacy and data security risks, including vulnerabilities, misuse, and compliance gaps.
</li>
<li>Contribute to Data Protection Impact Assessments (DPIAs) by assessing the technical and security implications of new processing activities.
</li>
<li>Partner with Legal to transform evolving regulatory frameworks (e.g., SOC2, GDPR, CCPA, NIST, ISO) into secure, scalable engineering solutions that drive compliance and build user trust.
</li>
</ul>Incident Response and Breach Management
<ul>
<li>Support and coordinate the company's technical response to data breaches or security incidents, including those impacting personal information (Incidents), enabling timely investigation, effective mitigation, and root-cause analysis.
</li>
<li>Design and implement processes and tooling to detect, investigate, and remediate data security incidents in compliance with applicable laws.
</li>
</ul>Privacy Automation And Process Enablement
<ul>
<li>Partner with Stakeholders to design and implement automated workflows and tools to streamline privacy operations, including data subject rights requests and data deletion workflows.
</li>
<li>Deploy and manage data loss prevention (DLP) capabilities across endpoints, applications, and infrastructure to prevent unauthorised disclosure of sensitive data.
</li>
<li>Implement continuous auditing, monitoring, and alerting to track compliance posture and surface security and operational privacy risks proactively.
</li>
</ul>Cross-Functional Collaboration and Enablement
<ul>
<li>Act as a trusted advisor to Stakeholders on the technical implementation of privacy and security controls.
</li>
<li>Provide strategic input on product design decisions and architectural choices to enable alignment with privacy and security best practices.
</li>
<li>Partner with cross-functional teams to develop and execute vendor risk assessments as they relate to data security, establishing processes that address technical, security, and privacy requirements across the entire vendor lifecycle.
</li>
</ul>Additional Responsibilities
<ul>
<li>Collaborate with Legal on technical aspects of contractual reviews with enterprise customers, partners, vendors, and other third parties.
</li>
<li>Assist with answering vendor security questionnaires as they relate to Rocket Lawyer's privacy and data-handling policies.
</li>
<li>Contribute to the development of internal policies, standards, and procedures based on technical best practices.
</li>
</ul>What you'll need
<ul>
<li>5+ years of hands-on experience in information security, privacy engineering, or related roles.
</li>
<li>Strong understanding of global data protection laws and regulations (e.g., GDPR, CCPA) and their technical implications.
</li>
<li>Proven experience in incident response, data protection engineering, and risk assessments.
</li>
<li>Familiarity with data classification, mapping, and governance methodologies.
</li>
<li>Experience with at least one software data classification technology, such as a DSPM.
</li>
<li>Experience with DLP technologies and implementing privacy workflows and automation.
</li>
<li>Familiarity with workflow automation tools and ticketing systems (e.g., Jira, ServiceNow).
</li>
<li>Experience in using third-party privacy automation tooling is a plus.
</li>
<li>Strong analytical, problem-solving, and communication skills, with the ability to work effectively across cross-functional teams.
</li>
<li>Industry certifications (e.g., CISSP, CISA, CISM) are a plus.
</li>
</ul>Not sure if you meet all the qualifications? Apply anyway! We value diverse experiences and encourage you to bring your unique talents to our team!

Benefits &amp; Perks
<ul>
<li>Comprehensive health plans (including Medical, Dental, and Vision insurance for full-time employees)</li>
<li>Unlimited PTO</li>
<li>Competitive salary packages</li>
<li>Life insurance</li>
<li>Disability benefits</li>
<li>Supplemental Optional Life Insurance Benefits</li>
<li>FSA Options Optional</li>
<li>HSA with Company Match</li>
<li>401k program with Company Match</li>
<li>Wellhub &amp; ClassPass fitness platforms</li>
<li>Comprehensive Pet Insurance options</li>
<li>Financial Wellbeing &amp; Student Loan Program access</li>
<li>Access to additional Mental Health &amp; Wellbeing resources</li>
<li>Pre-tax Commuter/Transit Benefits</li>
<li>Free Rocket Lawyer account with online access to an extensive legal documents library and brilliant licensed attorneys at discounted rates.</li>
</ul>
Interview Process
<ul>
<li>Recruiter Phone Screen</li>
<li>Role Assessment(s)</li>
<li>Hiring Manager Interview</li>
<li>Panel Interviews</li>
<li>Final Interview</li>
</ul><div>Rocket Lawyer is proudly committed to recruiting and retaining a diverse and inclusive workforce. As an Equal Opportunity Employer, we never discriminate based on race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, military or veteran status, status as an individual with a disability, or other applicable legally protected characteristics. We particularly welcome applications from veterans and military spouses.</div>
<div></div>
<div>All your information will be kept confidential according to EEO guidelines.
</div><div>You may request reasonable accommodations by sending an email to hr@rocketlawyer.com.</div>
<div></div>
<div><div>Compensation 
Base salary range by location:</div>
<ul><li>San Francisco Bay Area, CA: $161,109 - $189,540</li>
<li>California (outside of the San Francisco Bay Area) and Colorado: $136,943 - $175,324</li>
<li>Utah, Arizona, and North Carolina: $128,887 - $151,632</li>
</ul>
</div><div>By applying for this position, your data will be processed as per Rocket Lawyer Privacy Policy.</div></div>

AI Data Security & Privacy Engineer

ValueBase Consulting

<div>Data Protection &amp; Microsoft Purview Engineer 
Denver, CO / Minneapolis, MN (Local Candidates Only) 
3-Month Contract-to-Hire 
W2 Only (GC / U.S. Citizens Only) 
Up to $80/hour (W2)
Job Summary
We are seeking a highly skilled Data Protection &amp; Microsoft Purview Engineer for a contract-to-hire opportunity. This role will focus on assessing, optimizing, and supporting Microsoft Purview implementations, with an emphasis on data protection, compliance, and operational efficiency.
Candidates must be local to Denver, CO or Minneapolis, MN.
Required Qualifications
<ul><li>5+ years of experience in data protection, data security, or cloud security</li>
<li>Strong hands-on expertise with Microsoft Purview, including:
<ul><li>Information Protection</li>
<li>Data Loss Prevention (DLP)</li>
<li>Sensitive Information Types (SITs)</li>
<li>eDiscovery</li>
<li>Insider Risk Management</li>
</ul></li><li>Solid understanding of Microsoft E5 Security &amp; Compliance</li>
<li>Experience evaluating and/or implementing data protection tools</li>
<li>Strong communication and stakeholder collaboration skills</li>
</ul>
Preferred Qualifications
<ul><li>Experience with labeling taxonomy redesign</li>
<li>Background working in compliance-driven environments</li></ul></div>

Data Protection & Microsoft Purview Engineer

Lakeview Loan Servicing

<div>Overview:
<div>
The Data Protection Engineer (DPE) is responsible for designing, implementing, and maintaining corporate data protection solutions that safeguard sensitive company and customer information. This role focuses on the hands-on configuration, operation, and continuous improvement of data protection technologies and controls across cloud, endpoint, email, and data platforms.</div><div> 
The DPE works closely with IT Security, Compliance, Legal, and business stakeholders to translate data protection requirements into practical technical controls. This position requires a strong understanding of data loss prevention, data classification, information protection, regulatory compliance, and emerging data security threats to ensure the confidentiality, integrity, and availability of regulated and sensitive data.</div><div></div><div> 
This is an individual contributor/self-starter role, that is business minded and execution-focused, requiring strong technical proficiency, attention to detail, and the ability to operate effectively within a corporate environment.</div><div></div><div> 
This role can be remote anywhere in the country. The salary range for this role is $130,000 to $175,000, plus an annual bonus. However Lakeview considers several factors when extending an offer, including but not limited to, the roles and associated responsibilities, a candidate's work experience, education/training, location and key skills.</div>
Responsibilities:
<ul><li>
Design, deploy, configure, and maintain data protection solutions across endpoints, networks, cloud services, email systems, and collaboration platforms.</li><li>
Customize and fine-tune data protection policies, rules, and classifiers.</li><li>
Define and maintain data classification schemes and sensitivity labels.</li><li>
Fine-tune data protection policies, rules and detection algorithms to minimize false positives.</li><li>
Define and refine data classification labels, configurations and control parameters.</li><li>
Ability to troubleshoot sensitivity label issues with end users.</li><li>
Develop automated workflows to enhance data security and reduce manual intervention.</li><li>
Monitor and triage data protection alerts and incidents.</li><li>
Implement and operate DSPM controls, data discovery, posture assessments, and exposure remediation.</li><li>
Documentation of systems designs, configurations and support processes including, but not limited to, creating/maintaining conceptual, logic and system diagrams, standard operating procedures and playbooks, and configuration guides.</li><li>
Ensure data protection policies align with company and regulatory requirements, as well as industry regulations (e.g., GLBA, CCPA, NYDFS)</li><li>
Work closely with compliance and legal teams to enforce data protection requirements.</li><li>
Provide technical guidance on emerging threats and data security trends.</li><li>
Support data flow mapping, risk assessments, and remediation efforts.</li><li>
Participate in architecture reviews and change management activities.</li><li>
Stay current on data security trends and technologies.</li><li>
Integrate data protection platforms with SIEM and IAM systems.</li><li>
Perform other duties as assigned.</li></ul> 
<div></div>
Qualifications:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).</li><li>
8+ years of experience in DLP engineering.</li><li>
Strong, hands-on experience with Microsoft Purview (Data Loss Prevention and Information Protection) and Microsoft Defender.</li><li>
Experience with Microsoft Defender for Cloud and/or Netskope is a plus.</li><li>
Strong knowledge of encryption, data classification, network security, endpoint protection, and cloud security principles.</li><li>
Scripting (e.g., Python and PowerShell) and automation skills are a plus.</li><li>
Solid understanding of regular expression and regex-based pattern matching.</li><li>
Experience with enterprise support request and trouble ticketing solutions, such as ServiceNow and Jira.</li><li>
Familiar with support process implementation and improvement.</li><li>
Understanding data protection laws, compliance frameworks, and industry best practices.</li></ul> 
Knowledge and Skills Required:
<ul><li>Strong problem-solving and analytical skills with attention to detail.</li><li>
Ability to work independently and collaboratively in a fast-paced environment.</li><li>
Self-starter with strong interpersonal, written and verbal communication skills and the ability to interact with technical and non-technical stakeholders.</li></ul>
Certifications<ul><li>
CISSP, CISA, CEH, CCSP, or Microsoft Certified preferred</li></ul><div></div><h1 class="jobSectionHeader"> 
Location &amp; Compensation</h1><ul><li>
The annual salary for this role ranges between $130-175K depending on the individual&rsquo;s experience.</li><li>
Role can be 100% fully remote depending on geographic location</li></ul><div></div><h1 class="jobSectionHeader"> 
Physical Demands and Work Environment</h1><div>
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</div><div></div><div> 
While performing the duties of this job, the employee is regularly required to sit and use hands to handle, touch or feel objects, tools, or controls. The employee frequently is required to talk and hear. The noise level in the work environment is usually moderate. The employee is occasionally required to stand; walk; reach with hands and arms. The employee is rarely required to stoop, kneel, crouch, or crawl. The employee must regularly lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, color vision, and the ability to adjust focus.</div><div></div><h1 class="jobSectionHeader"> 
EEOC</h1><div>
Lakeview is an Equal Employment Opportunity employer. All aspects of consideration for employment and employment with the Company are governed on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.</div></div>

Data Protection Engineer

<div>Description
Leidos has an immediate need for a highly skilled and versatile Senior Data Protection Engineer (Trellix) to join the Network Execution Team supporting a critical Zero Trust initiative at U.S. Special Operations Command (USSOCOM). This role is essential for the tactical implementation of data-centric security controls across the Command's hybrid environment, ranging from commercial cloud capabilities on NIPR to the rigid, disconnected constraints of the SIPR and Top-Secret networks.
As a Sr. Data Protection Engineer (Trellix) , you will be the primary &quot;hands-on-keyboard&quot; implementer responsible for configuring, deploying, and tuning the encryption and labeling technologies that protect the Command's most sensitive data. You will translate the high-level architecture defined by the Chief Architect into concrete, enforceable policies within Microsoft Purview (for NIPR) and enterprise DRM platforms like Virtru or Kiteworks (for SIPR/Top Secret). You will move the Command from a passive &quot;audit&quot; posture to an active &quot;block&quot; posture, ensuring that data is encrypted and persistent protection travels with the file, regardless of where it is stored or transferred.
Responsibilities<ul><li>
Microsoft Purview Implementation (NIPR): Configure and deploy Sensitivity Labels, Auto-labeling policies, and Data Loss Prevention (DLP) rules within the Microsoft 365 E5 suite to classify and protect CUI and PII in SharePoint, OneDrive, and Exchange.</li><li>
DRM &amp; Encryption Configuration (SIPR/Top Secret): Implement and manage enterprise Digital Rights Management (DRM) solutions (specifically Virtru or Kiteworks) to enforce encryption-at-rest and attribute-based access control on classified networks.</li><li>
Policy Tuning &amp; Enforcement: Oversee the phased transition of security policies from &quot;Monitoring&quot; mode to &quot;Blocking&quot; mode, analyzing false positives and tuning classifiers (Regex, Keyword Dictionaries, Trainable Classifiers) to minimize mission disruption.</li><li>
Endpoint Protection: Collaborate with the Trellix engineering team to ensure that data tags applied by Purview/DRM tools are correctly recognized and enforced by endpoint DLP agents on workstations.</li><li>
Cross-Domain Support: Assist in the manual &quot;sneaker-net&quot; transfer of policy updates and classification patterns to the air-gapped Top Secret environment, ensuring configuration consistency across all networks</li></ul>
Qualifications
Security Clearance: Active Top-Secret clearance with SCI eligibility (TS/SCI).
Education: Master&rsquo;s degree in Systems Engineering, Computer Science, Cybersecurity, Electrical Engineering, or a related technical field. Additional years of experience may be considered in leiu of a degree.
Experience: 10+ years of relevant technical experience.
Required Experience &amp; Skills:<ul><li>
Experience with Trellix DLP (formerly McAfee) endpoint products</li><li>
Microsoft Purview Expertise: Significant (3+ years) hands-on experience configuring Microsoft Information Protection (MIP), Sensitivity Labels, and DLP policies in a large enterprise or DoD environment.</li><li>
DRM/Encryption Experience: Proven experience implementing and managing enterprise encryption and Rights Management tools such as Virtru, Kiteworks, or Seclore, particularly in on-premise or hybrid configurations.</li><li>
Data Classification: Strong understanding of data classification methodologies, including the creation of custom sensitive info types (SITs) using Regex and Exact Data Match (EDM).</li><li>
Technical Troubleshooting: Ability to diagnose and resolve complex issues related to encryption key management, policy propagation, and agent conflicts.</li><li>
Certification Required: CompTIA Security+ CE (or higher) to meet DoD 8570 IAT Level II requirements.</li></ul>
Preferred Qualifications:<ul><li>
Knowledge of NetApp BlueXP or BigID for data discovery.</li><li>
Prior experience supporting USSOCOM or working on SIPRNet/JWICS systems.</li><li>
Familiarity with DoD Data Strategy and CUI handling requirements.</li></ul>
Preferred Certifications:<ul><li>
Microsoft Information Protection Administrator (SC-400).</li><li>
Virtru Certified Professional or Kiteworks Administrator Certification.</li></ul>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.<h2 class="jobSectionHeader">
Original Posting:</h2>
March 18, 2026 
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2 class="jobSectionHeader"> 
Pay Range:</h2>
Pay Range $131,300.00 - $237,350.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</div>

Sr. Data Protection Engineer (Trellix)

Search 10000+ Data security engineer jobs near you this March. New roles added regularly across leading industries. Apply today.