> Markdown version of [/jobs/ext/1490216-sr-lead-cyber-sec-eng](https://www.wearedevelopers.com/jobs/ext/1490216-sr-lead-cyber-sec-eng). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Lead, Cyber Sec Eng

- **Company:** Northern Trust
- **Location:** Chicago, IL, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Databases, Data Integration, Information Leak Prevention, Data Security, Information Lifecycle Management, Information Systems Security Architecture Professional, Systems Development Life Cycle, Zero Trust Network Access, Security Information and Event Management, Systems Integration, Enterprise Data Management, Enterprise Software Applications, Data Classification, Software Security, Event Driven Architecture, Kubernetes, Microsoft Sentinel, Apache Kafka, Tools for Reporting, Splunk, Devsecops, Api Management, Key Vault
- **Published:** July 29, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=7a196dd6e5a6f1e6

## About the Role

* Hands-on experience with Microsoft Purview Information Protection, Data Loss Prevention (DLP), Data Lifecycle Management, and Compliance capabilities.
 * Experience implementing and managing Zscaler Data Protection, CASB, SSE, and Zero Trust security controls.
 * Strong understanding of data classification, labeling, governance, privacy, and regulatory compliance requirements.
 * Experience designing enterprise data-centric security architectures across cloud and hybrid environments.
 * Familiarity with integrating DLP, DAM, and cloud security platforms with Microsoft Sentinel, Splunk, or comparable SIEM solutions.
 * Understanding of DevSecOps and secure SDLC
 * Strong Azure cloud knowledge (Functions, APIM, Event Hub, Key Vault), * 9+ years in Cyber Security / Data Protection Engineering
 * Bachelor's degree or equivalent experience
 * Certifications (CISSP, CISM, cloud) preferred, * Lead enterprise DAM initiatives
 * Work independently with minimal supervision
 * Provide mentorship and technical leadership
 * Act as escalation point for critical issues
 * Influence architecture and control strategy, * Event-driven architecture (Kafka, Event Hub)
 * Kubernetes/cloud-native exposure
 * Experience with SIEM and analytics tools
 * Knowledge of governance and compliance frameworks

## Description

* Lead implementation of SecuPi (DAM) controls and data-level encryption
 * Lead implementation and optimization of Microsoft Purview DLP, Information Protection, Endpoint DLP, CASB, and Zscaler data protection controls.
 * Define and enforce enterprise data protection policies, including data classification, labeling, monitoring, and loss prevention controls.
 * Drive the adoption of Zero Trust and data-centric security principles across applications, databases, cloud platforms, and end-user environments.
 * Partner with compliance, risk, and business stakeholders to align data protection controls with regulatory and governance requirements.
 * Drive integration of SecuPi with enterprise applications, especially in Azure
Design and enforce data security policies and monitoring use cases, * Design and implement enterprise data protection architectures leveraging SecuPi DAM, Microsoft Purview, and Zscaler platforms.

 * Develop security use cases and monitoring strategies for sensitive data access, movement, and policy violations.
 * Support integration of data security platforms with SIEM, cloud, and enterprise security ecosystems.
 * Collaborate with architecture and enterprise teams
 * Define scalable and secure engineering solutions
 * Support full lifecycle (design to deployment and support)
 * Ensure security, scalability, and performance requirements, This role is key to advancing enterprise data-centric security by enabling real-time monitoring, encryption, and secure application integration using SecuPi/DAM platforms.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Best Practices for Using GitHub Secrets](https://www.wearedevelopers.com/videos/1214-best-practices-for-using-github-secrets)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)