Senior Cybersecurity Engineer DLP

Newrez•Coppell, TX

14h•Onsite

About The Position

Exceed the expectations of our residential mortgage borrowers & business partners through superior service, simple processes, and effective communications. We deliver on this mission by empowering our employees by encouraging and recognizing superior performance and innovative solutions, by promoting teamwork and divisional cooperation. POSITION SUMMARY Looking for a detail-oriented, proactive Data Loss Prevention (DLP) Security Engineer to help in secure design, configuration, and deployment of DLP tools and policies, and overall enhance our security posture. This position requires hands-on experience in securely designing, developing, and deploying vendor-specific DLP tools and policies in complex environments and geographically diverse offices. This role will be instrumental in data discovery and classification, creating rules to detect sensitive data exfiltration attempts, and analyzing incidents generated from detection engines. DESCRIPTION Essential Functions, Duties, and Responsibilities Deploy and configure enterprise DLP tools like Symantec DLP, Microsoft Purview and Skyhigh and ensure that policies are aligned with the organizational data protection requirements. Create, tune and update detection rules for sensitive data (PII, NPI, Intellectual Property) and balance business requirements with minimal false positives. Monitor and analyze DLP related events and perform root cause analysis of potential data exfiltration attempts. Provide guidance on secure classification and handling of data protection policies. Work closely with stakeholders to securely design, develop, and configure sensitive data detection and alerting rules in a SEIM platform such as Exabeam. Create and maintain security documentation on designs, configurations and deployments including playbooks and standard operations procedures (SOP). Collaborate with stakeholders to securely identify and classify sensitive data within the organization. Responsible for sensitive data log ingestion, aggregations, analysis, and reviews using tools like Cribl, Splunk, and Exabeam. Stay current on emerging threats, vulnerabilities, and regulatory changes. Ability to effectively and accurately convey information to others. Performs related duties as assigned by management.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Management Information Systems, or related field preferred.
5+ years’ experience in Cybersecurity Engineering, DLP Engineering, Network Security, or Security Operations discipline.
Vendor-specific certifications such as Microsoft Purview Information Protection & DLP, CEH, GSEC, Security+, ISO 27001.
Comprehensive expertise in data lifecycle, including creation, classification, storage, transmission, and disposal with the ability to design and enforce DLP policies that protect sensitive data at every stage.
Experience with SIEM platforms, Firewalls, XDR, DLP, AV, Identity and Access Management (IAM) tools.
Strong understanding of network protocols, operating systems, security architecture, and the ability to apply this knowledge to configure, optimize, and troubleshoot DLP solutions across distributed computing environments.
Strong problem-solving and communication skills with ability to work independently with little or no supervision.
Scripting skills, preferably Python, PowerShell, and KQL.
Strong interpersonal skills with the ability to develop and maintain effective and professional relationships across the organization and with customers.
High learning agility with the ability to learn and integrate business variables and learn new systems and platforms.
Strong analytical skills & problem-solving abilities; solid decision-making abilities coupled with sound judgment.
Effective at managing multiple priorities under tight deadlines in a fast-paced, dynamic environment.
Self-directed and comfortable working with ambiguity and uncertainty.
High degree of professional maturity, integrity, ability to maintain confidential data and information.
High degree of business acumen; strong technical aptitude.
Working on-site at assigned office location.
Regular and punctual attendance adhering to schedule established by leadership.
Flexibility to work occasional adjusted work schedules, overtime, and evening and/or weekend hours to meet deadlines or as business needs demand.
Working in a cubicle hub, maintaining focus on phone calls in a noisy environment within earshot of multiple other conversations.
Sedentary work in a stationary position at a cubicle for prolonged periods of time.
Constant repetitive motions required for operating a computer, such as typing and managing phone calls.
Constantly communicating effectively verbally in English, including accurately exchanging information with others following identification of correct procedures.
All employees are required to have smart phones that meet Company security standards with the ability to install apps such as Okta Verify and Microsoft Authenticator.
Employment will be contingent on this requirement.

Nice To Haves

Experience with Microsoft Purview and Skyhigh is a plus.

Responsibilities

Deploy and configure enterprise DLP tools like Symantec DLP, Microsoft Purview and Skyhigh and ensure that policies are aligned with the organizational data protection requirements.
Create, tune and update detection rules for sensitive data (PII, NPI, Intellectual Property) and balance business requirements with minimal false positives.
Monitor and analyze DLP related events and perform root cause analysis of potential data exfiltration attempts.
Provide guidance on secure classification and handling of data protection policies.
Work closely with stakeholders to securely design, develop, and configure sensitive data detection and alerting rules in a SEIM platform such as Exabeam.
Create and maintain security documentation on designs, configurations and deployments including playbooks and standard operations procedures (SOP).
Collaborate with stakeholders to securely identify and classify sensitive data within the organization.
Responsible for sensitive data log ingestion, aggregations, analysis, and reviews using tools like Cribl, Splunk, and Exabeam.
Stay current on emerging threats, vulnerabilities, and regulatory changes.
Ability to effectively and accurately convey information to others.
Performs related duties as assigned by management.

Benefits

Medical, dental, and vision insurance
Health Savings Account with employer contribution
401(k) Retirement plan with employer match
Paid Maternity Leave/Parental Bonding Leave
Pet insurance
Adoption Assistance
Tuition reimbursement
Employee Loan Program
The Newrez Employee Emergency and Disaster Fund is a new program to support our team members
Newrez NOW: Our Corporate Social Responsibility program, Newrez NOW, empowers employees to become leaders in their communities through a robust program that includes volunteering, philanthropy, nonprofit grants, and more
1 Volunteer Time Off (VTO) day, company-paid volunteer day where all eligible employees may participate in a volunteer event with a nonprofit of their choice
Employee Matching Gifts Program: We will match monetary employee donations to eligible non-profit organizations, dollar-for-dollar, up to $1,000 per employee
Newrez Grants Program: Newrez hosts a giving portal where we provide employees an abundance of resources to search for an opportunity to donate their time or monetary contributions