Data Loss Prevention Engineer

Fords Cyber Security Data Protection team is the frontline defense for our global digital transformation. We manage a diverse portfolio of programs designed to enable a securely connected business while safeguarding the companys most critical data assets. As a DLP Senior Development Analyst, you will serve as a subject matter expert for our Microsoft Purview and Sentinel ecosystem. You will be responsible for architecting and optimizing our Data Loss Prevention framework, ensuring a robust security posture that proactively mitigates risk and prevents the unauthorized disclosure of sensitive information.

• Architect Engineer DLP Solutions: Lead the design and engineering of complex Data Loss Prevention projects, utilizing Python, Java, and Alteryx to build automated workflows and data-driven security controls.

• API Strategy Development: Drive the API roadmap for the Data Protection service; architecting, developing, and managing RESTful APIs to integrate security tools and streamline internal analytics.

• Full-Stack Security Engineering: Develop and maintain software within a GitHub-based environment, ensuring robust version control, documentation, and high-quality deployment of security-focused code.

• Advanced Data Analytics: Build and optimize Alteryx workflows and data models to increase reporting speed, providing deep insights into data movement and potential exfiltration patterns.

• Software Lifecycle Management: Oversee the end-to-end testing, deployment, and integration of working software and automated workflows, ensuring seamless performance across the security ecosystem.

• Microsoft Purview Administration: Lead the technical administration of Microsoft Purview, including the architecture and implementation of advanced DLP policies tailored to Fords global requirements.

• Stakeholder Architecture Reviews: Formalize and present complex technical architectures to stakeholders, securing approvals and ensuring alignment with Fords broader cybersecurity standards.

• Strategic Business Liaison: Translate complex business requirements into technical deliverables, negotiating feasibility and resource allocation with key stakeholders and business customers.

• Continuous Security Improvement: Define and implement process and technology enhancements to prevent the unauthorized disclosure, modification, or removal of Fords most sensitive data.

• Policy Tuning Optimization: Aggregate and analyze global DLP telemetry to tune existing policies, reduce false positives, and determine where additional technical controls are required.

• Advanced Threat Analysis: Perform high-level triage and analysis of DLP alerts, managing the remediation of complex incidents and escalating critical risks to leadership.

• Global Metric Reporting: Design and deliver comprehensive data protection metrics to provide leadership with visibility into the global data loss risk posture.

• Technical Leadership: Maintain a high degree of technical curiosity, proactively learning and implementing emerging technologies to solve Fords most challenging data protection problems.

• Foundational Education: Bachelors Degree in Computer Science, Cybersecurity, Information Technology, or a related STEM field.

• Core Professional Experience:

  • 3+ years in a Cybersecurity role, specifically focused on Data Loss Prevention (DLP), Data Governance, or Security Engineering.
  • 3+ years of hands-on experience architecting and managing Microsoft Purview (MIP) and Microsoft Sentinel in a large-scale enterprise environment.

• Advanced Software Engineering: Proven expertise in Software Engineering Architecture, Lifecycle (SDLC), and Data Management within a GitHub-based environment.

• Full-Stack Development Automation: Proficiency in Python or Java development with a focus on building automated security workflows and technical solutions.

• API Architecture Management: Extensive experience designing, implementing, and managing RESTful APIs to enable system integration and advanced data analytics.

• Data Protection Platforms: Deep technical expertise in the administration and architecture of Microsoft Purview, Sentinel, and Defender for Endpoint, including the use of KQL (Kusto Query Language).

• Automated Data Analytics: Expert-level experience with Alteryx workflow development and data modeling to process global DLP telemetry and increase reporting speed.

• DLP Policy Engineering: Experience in Policy Tuning and Optimization, including the creation of advanced DLP policies and the analysis of data loss patterns to determine additional controls.

• Regulatory Compliance Mastery: Demonstrated experience implementing security controls within a highly regulated environment (e.g., Banking, Finance, or Government), with a deep understanding of GLBA and global privacy compliance.

• Technical Solution Design: Ability to perform Architecture Knowledge mapping and translate complex business requirements into high-level technical deliverables.

• Cloud Emerging Tech: Hands-on experience with GCP (Google Cloud Platform) and familiarity with developing or implementing machine learning algorithms to enhance data classification.

• Strategic Leadership: Strong Software Engineering Leadership skills with the ability to train, advise, and mentor team members on technical best practices.

• Stakeholder Management: Excellent written and oral communication skills, with a proven ability to present complex architectures to management and collaborate with global stakeholders.

• Analytical Problem Solving: Strong decision-making skills with a process-driven mindset and a "find-a-way" attitude toward solving challenging technical assignments.

• Professional Toolset: Proficiency in Data Visualization tools (e.g., Power BI, Tableau) and the Microsoft Office 365 suite for advanced data reporting.