> Markdown version of [/jobs/ext/3124737-principal-cyber-sec-eng-dlp-data-protection](https://www.wearedevelopers.com/jobs/ext/3124737-principal-cyber-sec-eng-dlp-data-protection). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal, Cyber Sec Eng - DLP / Data Protection - **Company:** Propertyvalue Northern Trust - **Location:** Chicago, IL, United States - **Salary:** $137,400.0 - $233,600.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Proxy Servers, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Data Centers, Data Transmissions, Information Leak Prevention, Data Security, Information Lifecycle Management, Information Security Management, Network Security, Massachusetts Comprehensive Assessment Systems, PCI Data Security Standards, Azure Active Directory, Systems Integration, Traffic Analysis, Enterprise Data Management, Symantec, Data Classification, Software Troubleshooting, Firewalls (Computer Science), Database Monitoring - **Published:** September 28, 2026 - **Apply:** https://www.dice.com/job-detail/6e39ed4e-f254-45c7-ae73-d60efb4872c7 ## About the Role * Strong hands-on experience with Zscaler and Microsoft Purview DLP. * Deep knowledge of Data Loss Prevention, data classification, information protection, encryption, and enterprise data protection principles. * Experience with enterprise DLP platforms and Azure security capabilities, including Azure Information Protection (AIP), Microsoft Information Protection (MIP), and Microsoft Defender for Cloud Apps (formerly MCAS). * Strong understanding of network security concepts, including proxies, firewalls, traffic analysis, and external data transfer paths. * Experience designing, deploying, troubleshooting, and operating security controls in complex enterprise environments. * Strong troubleshooting, analytical, written communication, and stakeholder management skills. * Ability to operate independently, lead through influence, and make sound technical decisions in complex or ambiguous situations., * Extensive experience in Cyber Security, Data Protection Engineering, or a closely related discipline. * Experience working in a highly regulated enterprise environment. * Experience supporting control alignment with FFIEC, PCI-DSS, and SOX expectations is preferred. * Experience leading large-scale DLP platform migrations, policy redesigns, or legacy technology exit strategies is preferred. Leadership Scope (P4 Expectations) * Operate as a senior individual contributor with wide autonomy and minimal oversight. * Own technical strategy and influence architecture, controls, and execution priorities. * Provide direct influence across Security, Compliance, Privacy, Microsoft 365, and Risk. * Create scalable, reusable engineering patterns and operational guardrails. * Anticipate risk before incidents occur and translate emerging threats into preventive controls. * Act as the escalation point and design authority for critical or ambiguous decisions. Nice to Have * Experience with AI-specific DLP use cases, DSPM, Insider Risk Management, Communication Compliance, and retention enforcement. * Experience with Database Activity Monitoring and data-centric security controls. * Experience integrating DLP, DAM, cloud security, and monitoring platforms across hybrid enterprise environments. * Knowledge of governance, privacy, compliance, and risk management frameworks. ## Description Principal Cyber Security Engineer responsible for leading the secure enablement, technical direction, control guidance, and execution oversight for Data Protection Engineering. The role has primary accountability for Data Loss Prevention (DLP), encryption-related data protection, and external data transfer controls, including ongoing data center bypass work. This position also provides technical leadership for exception handling automation, Zscaler policy redesign, Database Activity Monitoring (DAM), and the migration from Symantec DLP to Microsoft Purview, including the Symantec exit strategy., * Own the technical vision and control strategy for DLP and encryption data protection, not just feature implementation. * Lead secure enablement and control oversight for DLP engineering and external data transfer controls, including data center bypass capabilities. * Drive automation of exception handling and establish repeatable governance workflows. * Lead the redesign and optimization of Zscaler data protection and security policies. * Provide technical direction for Database Activity Monitoring (DAM) initiatives. * Lead the migration from Symantec DLP to Microsoft Purview and define a controlled, supportable Symantec exit strategy. * Define durable and repeatable security patterns that can be adopted by engineering, technology, and business teams. * Partner with Security, Compliance, Privacy, Microsoft 365, and Risk stakeholders to align controls with enterprise requirements. Major Duties * Design, implement, and operate enterprise DLP-related controls spanning information protection, labeling, endpoint, cloud, identity, and governance capabilities. * Develop and maintain the enterprise information protection and labeling strategy. * Engineer and operate DLP and Endpoint DLP controls, including AI-specific data protection scenarios. * Implement and enhance Insider Risk Management and Communication Compliance controls. * Advance Data Lifecycle Management capabilities, including retention enforcement. * Support Data Security Posture Management (DSPM), including exposure detection and oversharing remediation. * Configure, deploy, troubleshoot, and operate controls across Active Directory and Microsoft Entra ID environments. * Support production changes through disciplined change management, testing, approved deployment windows, and post-change validation. * Anticipate data protection and emerging AI risks and translate them into preventive and detective controls. * Serve as the escalation point and design authority for complex or ambiguous AI and data protection security decisions., This role is key to advancing enterprise data protection by establishing the technical direction for DLP and related controls, modernizing the DLP technology landscape, improving the consistency of engineering patterns, and enabling timely, risk-informed decisions across complex security initiatives. ## Related Videos - [Exploring the Power of gRPC-Gateway for Writing RESTful Services](https://www.wearedevelopers.com/videos/2072-exploring-the-power-of-grpc-gateway-for-writing-restful-services) - [The Sustainability Race: AI's Promises, Pitfalls and Potential](https://www.wearedevelopers.com/videos/100155-the-sustainability-race-ai-s-promises-pitfalls-and-potential) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Stop Using Node.js Like It’s 2020! - Alfonso Graziano](https://www.wearedevelopers.com/videos/1863-stop-using-node-js-like-it-s-2020-alfonso-graziano) - [Building the Nervous System of AI - Michael Kagan (NVIDIA)](https://www.wearedevelopers.com/videos/2133-building-the-nervous-system-of-ai-michael-kagan-nvidia) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)