Senior Security Engineer II – Cybersecurity Data Protection Engineer

CDW

About The Position

At CDW, we make it happen, together. Trust, connection, and commitment are at the heart of how we work together to deliver for our customers. It’s why we’re coworkers, not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where we’re headed. We’re proud to share our story and Make Amazing Happen at CDW. Job Summary CDW delivers full‑stack technology solutions and global services to more than 250,000 customers across enterprise, government, education, and healthcare. As part of CDW’s Global Information Security organization, the Senior Security Engineer II plays a critical role in protecting CDW’s information assets while enabling secure innovation at enterprise scale. You will join a multidisciplinary security engineering organization and serve as a hands‑on senior engineer responsible for executing and operationalizing CDW’s data protection capabilities. While the broader team spans platform security, vulnerability management, and emerging threat analysis, and more; your primary focus is advancing CDW’s data security program—leveraging Microsoft Purview, DSPM, DLP, data classification, encryption, and modern data protection controls across cloud and endpoint environments. In this role, you will drive the engineering execution, operational maturity, and continuous improvement of data security controls, working closely with architecture, privacy, legal, and technology teams to reduce data risk and support the business securely.

Requirements

Bachelor’s degree and 7+ years of hands‑on cybersecurity engineering experience, with a strong focus on data security, OR 11+ years of information technology experience, to include 7+ years of hands‑on cybersecurity engineering experience, with a strong focus on data security.
Deep, hands‑on experience with Microsoft Purview, including deploying and operating Information Protection and Data Loss Prevention (DLP) controls at scale.
Proven experience with data discovery, classification, labeling, and data inventory management across structured and unstructured data.
Demonstrated ability to own the engineering execution and operational maturity of enterprise data security programs in partnership with architecture and leadership teams.
Strong track record engineering scalable, automated, and secure data protection solutions in complex enterprise environments.
Experience developing and operating data protection capabilities focused on data discovery, data inventory, data risk assessment, and encryption across multiple data types.
Hands‑on experience operating or integrating with Data Security Posture Management (DSPM) platforms.
Experience designing and implementing data protection architectures that scale across cloud, SaaS, endpoint, and hybrid environments.
Ability to integrate data security controls with identity, endpoint, network, cloud, and SIEM platforms to improve visibility and risk reduction.
Strong analytical skills with the ability to identify data exposure patterns, assess risk, and translate findings into actionable remediation.
Excellent communication skills, with the ability to translate technical data security concepts into business‑relevant outcomes.
Skilled at building rapport and establishing effective partnerships across Legal, Privacy, Cloud, Identity, and Architecture teams.
Strong problem‑solving and collaboration skills, with demonstrated ability to explain complex technical concepts to diverse audiences.
Commitment to continuous improvement, security process engineering, and operational excellence.
Ability to stay current with emerging trends in data security, cybersecurity, and AI, ensuring data protection controls remain effective and relevant.
Familiarity with applicable data security frameworks, standards, and regulatory requirements, including GDPR, PCI, and SOX.

Nice To Haves

Certified Information Systems Security Professional (CISSP), a plus.
Certified Information Security Manager (CISM), a plus.
Experience with AWS, GCP, or other cloud service providers beyond Microsoft, a plus.

Responsibilities

Serve as a hands‑on senior engineer responsible for executing, scaling, and operationalizing CDW’s data security capabilities in partnership with architecture and leadership teams.
Own the engineering implementation and day‑to‑day operation of CDW’s data protection platforms, with a primary focus on Microsoft Purview.
Design, deploy, and continuously improve Information Protection, Data Loss Prevention (DLP), and data access controls across cloud, SaaS, endpoint, and hybrid environments.
Engineer and operationalize data classification and labeling by defining sensitivity schemas, classification taxonomies, and enforcement patterns.
Build, tune, and maintain detection logic including Regular Expressions, EDM classifiers, and custom pattern‑matching to identify and protect sensitive data.
Lead data discovery and inventory efforts across structured and unstructured data sources to identify exposure and risk.
Own the engineering execution and operation of CDW’s Data Security Posture Management (DSPM) capabilities, translating findings into actionable remediation.
Analyze data exposure trends, leakage paths, and emerging threats, and produce metrics and insights that inform security priorities and decisions.
Design and implement data protection architectures that scale across enterprise environments, focusing on secure implementation and practical delivery.
Validate and enforce encryption, access controls, and data movement restrictions aligned to Zero Trust principles.
Integrate data security controls with identity, endpoint, network, cloud, and SIEM platforms to improve visibility and reduce risk.
Support data‑related security incidents and investigations, contributing to containment, remediation, and control improvements.
Improve detection and response by correlating signals across Purview, DSPM, DLP, SIEM, and endpoint platforms.
Drive operational excellence through automation, process improvement, and repeatable security engineering workflows.
Act as a technical mentor and subject‑matter expert for data protection engineering, providing actionable guidance to Legal, Privacy, Cloud, Identity, and Architecture partners.