Senior Data Security Engineer

Role: Senior Data Security Engineer (DLP & AI Security) - Microsoft Purview , Concentric AI & VaronisLocation: New York, NY 10017 (100% Onsite)Full Time OnlySkills Required:Primary Skill - Data Security, DLPExperience in - Data Classification, DLP solution.RoleOwner of Data Security ProgramResource needs to manage the tool as Admin / define new policiesMandatory Tools - Microsoft Purview & Concentric AI and/or Varnish Data SecurityTools Good to have - DSPM.AI experience is required. (Mainly Security for AI).DETAILED JD:Role OverviewWe are looking for a skilled Data Security Engineer with strong hands‑on experience in Microsoft Purview Information Protection , Concentric AI and Varonis to support enterprise data discovery, classification, risk prioritization, and data loss prevention (DLP) initiatives.The role focuses on protecting sensitive and business‑critical data across cloud, endpoint, and collaboration platforms through automation, policy enforcement, analytics, and continuous risk reduction.Key ResponsibilitiesMicrosoft Purview – Data Protection & GovernanceConfigure and manage Microsoft Purview Information Protection components:Sensitivity labelsData classificationAuto‑labeling policiesImplement and manage DLP policies across:Exchange OnlineSharePoint OnlineOneDriveMicrosoft TeamsEndpoint DLPTune DLP rules to reduce false positives while ensuring regulatory compliance.Monitor alerts, incidents, and policy violations; perform root‑cause analysis.Support data discovery and classification scans across M365 workloads.Concentric AI – Sensitive Data Discovery & Risk PrioritizationDeploy and manage Concentric AI for:Sensitive data discoveryContext‑aware risk scoringData access analyticsIdentify overexposed, stale, or risky data across repositories.Correlate user behavior, data sensitivity, and access patterns.Use Concentric insights to fine‑tune Purview DLP and labeling strategies.Generate risk‑based remediation recommendations.Varonis – Data Security Analytics & Access GovernanceDeploy, configure, and manage Varonis modules for:Sensitive data discovery and classificationData access analytics and permissions analysisThreat detection and data exposure reductionIdentify excessive permissions, inactive users, and anomalous data access.Investigate insider threats, abnormal behavior, and data exfiltration attempts.Drive remediation by tightening access controls and reducing data exposure.Integrate Varonis insights with Purview and Concentric findings for unified risk management.Incident Handling & Incident Response SupportInvestigate data exposure and DLP incidents using Purview, Concentric, and Varonis dashboards.Perform incident triage, analysis, and coordination with SOC, IR, and IT teams.Support incident containment actions:Policy blocksUser access restrictionsLabel enforcementMaintain incident documentation and post‑incident analysis reports.Reporting, Governance & CompliancePrepare monthly and quarterly reports covering:Data risk postureDLP trendsSensitive data exposure metricsTrack KPIs such as:Reduction in data exposure riskDLP incident trendsLabel adoption and coverageSupport audit and compliance initiatives aligned to:ISO 27001GDPRSOC 2HIPAA (where applicable)Maintain SOPs, playbooks, and governance documentation.Integration & Continuous ImprovementIntegrate Purview and Concentric with:Microsoft Entra IDSIEM platforms (Splunk / Sentinel – where applicable)Recommend improvements for data security posture based on analytics.Stay updated with evolving data security threats, Purview features, Concentric AI and Varonis capabilities.