Information Security Senior Engineer Dallas, TX

ATTENTION MILITARY AFFILIATED JOB SEEKERS- Our organization works with partner companies to source qualified talent for their open roles. The following position is available toVeterans Transitioning Military National Guard and Reserve Members Military Spouses Wounded Warriors and their Caregivers. If you have the required skill set education requirements and experience please click the submit button and follow the next steps. Unless specifically stated otherwise this role is On-Site at the location detailed in the job post.

Equinix is the worlds digital infrastructure company shortening the path to connectivity to enable the innovations that enrich our work life and planet.

A place where tech thinkers and future builders turn bold ideas into breakthrough experiences we welcome your unique perspective.
Help us challenge assumptions uncover bias and remove barriersbecause progress starts with fresh ideas. Youll find belonging purpose and a team that welcomes youbecause when you feel valued youre empowered to do your best work.
Job Summary

The Digital Information Security Engineering team is seeking a Senior Data Protection Engineer to design implement and scale enterprise data protection capabilities with a strong focus on CASB DSPM eDLP Secure File Sharing and Data Movement Controls.

This role is responsible for safeguarding sensitive data across SaaS web endpoint and cloud environments by leveraging real-time inline inspection deep content classification and advanced document matching techniques. The ideal candidate is a hands-on engineer with deep expertise in data protection controls capable of operationalizing data-centric security within a Zero Trust architecture.

Responsibilities

DSPM (Data Security Posture Management)

Implement and optimize DSPM to continuously discover and classify sensitive data across:

SaaS applications

Cloud storage and object stores

Unstructured data repositories

Analyze data security posture identifying:

Overshared or publicly exposed data

Sensitive data sprawl

Misconfigured access controls

Drive risk-based remediation workflows in partnership with data owners and application teams

Establish continuous monitoring of data exposure and compliance posture

Advanced Data Detection & Protection

Design and deploy eDLP policies to inspect and control data in motion across web and cloud channels

Implement advanced detection techniques including:

Exact Data Match (EDM) for structured sensitive data (e.g. PII PCI financial datasets)

Indexed Document Matching (IDM) for unstructured documents and intellectual property protection

Regex keyword and contextual data classification rules

Build tune and maintain EDM data sets and IDM fingerprinting repositories to protect critical business data

Configure real-time enforcement actions:

Block quarantine alert or coach users

Continuously optimize detection accuracy by reducing false positives/false negatives

Secure File Sharing & Data Movement Controls

Enforce secure data transfer policies across:

Web uploads and downloads

SaaS file sharing and collaboration tools

Third-party and external data exchanges

Implement safeguards against:

Unauthorized data exfiltration

Risky upload behavior

Unapproved sharing channels

Support business collaboration requirements while ensuring strong data protection controls

CASB & SaaS Security

Design and implement CASB controls (inline and API-based) to secure SaaS platforms such as M365 Google Workspace and Salesforce

Enforce granular access and session controls including:

Inline transaction control (upload/download restrictions)

Session-based enforcement (block coach isolate redact)

Adaptive policies based on user device and risk context

Identify and mitigate risks related to:

Shadow IT

OAuth app abuse

SaaS misconfigurations and oversharing

Align CASB policies with Zero Trust principles and least-privilege access models.

Automation & Integration Engineering

Develop automation using Python and APIs to:

Manage policies programmatically

Automate lifecycle management of EDM/IDM datasets

Trigger remediation workflows based on DSPM findings

Integrate with SIEM/SOAR platforms for centralized monitoring and response

Build tooling to enhance visibility reporting and operational efficiency

Security Monitoring & Risk Reduction

Review and tune DLP and CASB alerts focusing on data exfiltration and misuse.

Define and track key data protection metrics including:

Sensitive data exposure trends

Policy enforcement effectiveness

Data exfiltration attempts

Conduct data risk assessments and continuous control validation

Tune and refine policies to maintain high efficacy and low business disruptions



Qualifications

Bachelors or Masters degree in Computer Science Information Security or related field

710 years of experience in data protection or security engineering

Required Expertise

Hands-on experience with:

CASB (inline and API modes)

DSPM

eDLP

Exact Data Match (EDM)

Indexed Document Matching (IDM)

Strong understanding of:

Data classification and content inspection

Data exfiltration vectors and prevention techniques

SaaS and cloud data security risks

Experience implementing Zero Trust data protection strategies

Technical Skills

Strong scripting/programming skills (Python preferred)

Experience with:

REST APIs and security integrations

SIEM/SOAR platforms

Cloud environments (AWS Azure GCP)

Understanding of identity access control and conditional access models

Successful Candidate Will

Be deeply hands-on with data protection technologies

Take a data-first approach to security focusing on measurable risk reduction

Demonstrate strong analytical and tuning expertise especially with EDM/IDM

Be proactive curious and continuously improving data protection coverage and accuracy

Thrive in a fast-paced diverse and constantly evolving environment

The targeted pay range for this position in the following location is / locations are:


United States - Dallas Infomart Office DAI : 136000 - 204000 USD / Annual