Sr Engineer, IT Security DLP

Overall Job Summary

This position requires minimal supervision, the Data Security Engineer is responsible for protecting the corporate information assets of Tractor Supply Company. The Data Security Engineer is responsible for configuring and improving DLP policies across multiple technologies, working towards increasing DLP Program coverage, building and maintaining DLP Program process documentation, and defining new processes and controls to mature the DLP.

Essential Duties and Responsibilities (Min 5%)

• Maintain DLP technologies and tools to monitor, detect, and prevent data leakage or unauthorized data transfers.
• Performs data protection monitoring and reporting, analyzes security alerts, and escalates security alerts to local support teams.
• Working with vendors to implement and support DLP technology, including troubleshooting and upgrading.
• Maintaining DLP technology, configuring policies, and compiling reports for analytics.
• Monitoring and responding to alerts generated from DLP systems and other technologies.
• Working with the Incident Response team to escalate and respond to potential or real threats.
• Conduct frequent assessments of data handling processes, identify vulnerabilities, and recommend security enhancements to track and mitigate risks.
• Collaborate with internal and external stakeholders, such as IT teams, legal, compliance, and auditors, to ensure alignment with data security and privacy requirements.
• Support audit and compliance activities and maintain documentation, including policies, procedures, incident reports, and configuration details.
• Stay up to date with the latest industry trends, emerging threats, and advancements in DLP technologies, recommending and implementing improvements.
• Perform incident response processes, including investigation, analysis, and remediation.   

Required Qualifications

Experience: 5 years’ experience in related field, 5 years’ experience managing DLP tools  

Education: Bachelor’s degree from an accredited college or university or. Any suitable combination of education and experience will be considered.  

Professional Certifications: CISSP, CSSLP, CISM, CCSP, GSLC, GSEC, CISA, and/or SSCP preferred. 

High Demand IT Specialized skills: DLP, CASB, data encryption, monitoring tools, data protection best practices.
 

Preferred knowledge, skills or abilities

• Software Tools: Netskope, Proofpoint, M365
• Demonstrated experience with incident remediation automation and data at rest process development, especially within M365 environments.
• Demonstrated Information Security understanding and, specifically, industry best practices for the development of data protection processes.
• Demonstrated leadership ability, including experience leading complex programs involving multiple business and technical stakeholders.
• Excellent written and verbal presentation skills with the ability to communicate professionally with team members, stakeholders, and senior leadership.
• Strong knowledge of malicious insider threat indicators, such as those associated with data theft of intellectual property, sabotage, and espionage.
• Knowledge of cybersecurity regulations and compliance standards, such as HIPAA, PCI, NIST.
• Strong understanding of information security and network fundamentals

Working Conditions

Physical Requirements

Disclaimer

This job description represents an overview of the responsibilities for the above referenced position.  It is not intended to represent a comprehensive list of responsibilities.  A team member should perform all duties as assigned by his/ her supervisor.