Senior Information Protection & AI Security Engineer

• Support enterprise data protection, AI governance, and insider risk initiatives within a highly regulated financial services environment.
• Implement, configure, and continuously improve Microsoft Purview capabilities, AI security guardrails, and insider threat detection controls.
• Work extensively with Microsoft Purview Information Protection, Data Loss Prevention (DLP), Insider Risk Management, Communication Compliance, and data classification capabilities.
• Implement security and governance controls for Microsoft Copilot and other generative AI platforms to prevent sensitive data exposure, oversharing, prompt-based attacks, and unauthorized AI usage.
• Collaborate with Security Operations, Incident Response, Compliance, Technology, and business teams to strengthen information protection controls and improve insider threat detection.
• Develop security automation, monitoring, metrics, and operational documentation using PowerShell, Microsoft Graph API, KQL, Microsoft Sentinel, and the broader Microsoft security ecosystem.
• Create security dashboards, metrics, reporting, standards, procedures, and operational runbooks.

• 8+ years of experience in cybersecurity, information protection, data security, or enterprise security engineering, including 5+ years of hands-on Microsoft Purview experience.
• Strong experience configuring and tuning Microsoft Purview, including Information Protection, DLP, Insider Risk Management, Communication Compliance, data classification, and sensitivity labels.
• Experience implementing AI security and governance controls for enterprise generative AI platforms, including Microsoft Copilot.
• Knowledge of GenAI security risks such as sensitive data leakage, oversharing, unauthorized AI usage, and prompt injection.
• Experience developing and tuning insider threat and data exfiltration detection policies while improving detection accuracy and reducing false positives.
• Understanding of the Microsoft 365 Security and Compliance ecosystem.
• Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Azure, and Microsoft Graph API.
• Ability to develop security and operational automation using PowerShell, Microsoft Graph API, KQL, or similar technologies.
• Experience creating security dashboards, metrics, reporting, standards, procedures, and operational runbooks.
• Strong understanding of information governance, data classification, security controls, and regulatory compliance in large enterprise environments.
• Experience collaborating with Security Operations, Incident Response, Compliance, engineering, and business teams.
• Experience within financial services, regulated industries, or other highly sensitive enterprise environments is strongly preferred.
• Relevant certifications such as SC 400, SC 100, SC 200, SC 300, CISSP, CISM, or GIAC are preferred.
• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.

Desired Skillset: Preferred certifications include Microsoft SC 400, SC 100, SC 200, or SC 300, as well as CISSP, CISM, GIAC, or comparable security certifications.

Educational Requirements: Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.