Data Loss Prevention Engineer

Fords Cyber Security Data Protection team is the frontline defense for our global digital transformation. We manage a diverse portfolio of programs designed to enable a securely connected business while safeguarding the companys most critical data assets. As a DLP Senior Development Analyst you will serve as a subject matter expert for our Microsoft Purview and Sentinel ecosystem. You will be responsible for architecting and optimizing our Data Loss Prevention framework ensuring a robust security posture that proactively mitigates risk and prevents the unauthorized disclosure of sensitive information.

• Architect & Engineer DLP Solutions: Lead the design and engineering of complex Data Loss Prevention projects utilizing Python Java and Alteryx to build automated workflows and data-driven security controls.
• API Strategy & Development: Drive the API roadmap for the Data Protection service; architecting developing and managing RESTful APIs to integrate security tools and streamline internal analytics.
• Full-Stack Security Engineering: Develop and maintain software within a GitHub-based environment ensuring robust version control documentation and high-quality deployment of security-focused code.
• Advanced Data Analytics: Build and optimize Alteryx workflows and data models to increase reporting speed providing deep insights into data movement and potential exfiltration patterns.
• Software Lifecycle Management: Oversee the end-to-end testing deployment and integration of working software and automated workflows ensuring seamless performance across the security ecosystem.
• Microsoft Purview Administration: Lead the technical administration of Microsoft Purview including the architecture and implementation of advanced DLP policies tailored to Fords global requirements.
• Stakeholder Architecture Reviews: Formalize and present complex technical architectures to stakeholders securing approvals and ensuring alignment with Fords broader cybersecurity standards.
• Strategic Business Liaison: Translate complex business requirements into technical deliverables negotiating feasibility and resource allocation with key stakeholders and business customers.
• Continuous Security Improvement: Define and implement process and technology enhancements to prevent the unauthorized disclosure modification or removal of Fords most sensitive data.
• Policy Tuning & Optimization: Aggregate and analyze global DLP telemetry to tune existing policies reduce false positives and determine where additional technical controls are required.
• Advanced Threat Analysis: Perform high-level triage and analysis of DLP alerts managing the remediation of complex incidents and escalating critical risks to leadership.
• Global Metric Reporting: Design and deliver comprehensive data protection metrics to provide leadership with visibility into the global data loss risk posture.
• Technical Leadership: Maintain a high degree of technical curiosity proactively learning and implementing emerging technologies to solve Fords most challenging data protection problems.

• Foundational Education: Bachelors Degree in Computer Science Cybersecurity Information Technology or a related STEM field.
• Core Professional Experience:
  • 3 years in a Cybersecurity role specifically focused on Data Loss Prevention (DLP) Data Governance or Security Engineering.
  • 3 years of hands-on experience architecting and managing Microsoft Purview (MIP) and Microsoft Sentinel in a large-scale enterprise environment.
• Advanced Software Engineering: Proven expertise in Software Engineering Architecture Lifecycle (SDLC) and Data Management within a GitHub-based environment.
• Full-Stack Development & Automation: Proficiency in Python or Java development with a focus on building automated security workflows and technical solutions.
• API Architecture & Management: Extensive experience designing implementing and managing RESTful APIs to enable system integration and advanced data analytics.
• Data Protection Platforms: Deep technical expertise in the administration and architecture of Microsoft Purview Sentinel and Defender for Endpoint including the use of KQL (Kusto Query Language).
• Automated Data Analytics: Expert-level experience with Alteryx workflow development and data modeling to process global DLP telemetry and increase reporting speed.
• DLP Policy Engineering: Experience in Policy Tuning and Optimization including the creation of advanced DLP policies and the analysis of data loss patterns to determine additional controls.
• Regulatory & Compliance Mastery: Demonstrated experience implementing security controls within a highly regulated environment (e.g. Banking Finance or Government) with a deep understanding of GLBA and global privacy compliance.
• Technical Solution Design: Ability to perform Architecture Knowledge mapping and translate complex business requirements into high-level technical deliverables.
• Cloud & Emerging Tech: Hands-on experience with GCP (Google Cloud Platform) and familiarity with developing or implementing machine learning algorithms to enhance data classification.
• Strategic Leadership: Strong Software Engineering Leadership skills with the ability to train advise and mentor team members on technical best practices.
• Stakeholder Management: Excellent written and oral communication skills with a proven ability to present complex architectures to management and collaborate with global stakeholders.
• Analytical Problem Solving: Strong decision-making skills with a process-driven mindset and a find-a-way attitude toward solving challenging technical assignments.
• Professional Toolset: Proficiency in Data Visualization tools (e.g. Power BI Tableau) and the Microsoft Office 365 suite for advanced data reporting.