Data Loss Prevention Engineer

Ford’s Cyber Security Data Protection team is the frontline defense for our global digital transformation. We manage a diverse portfolio of programs designed to enable a securely connected business while safeguarding the company’s most critical data assets. As a DLP Senior Development Analyst, you will serve as a subject matter expert for our Microsoft Purview and Sentinel ecosystem. You will be responsible for architecting and optimizing our Data Loss Prevention framework, ensuring a robust security posture that proactively mitigates risk and prevents the unauthorized disclosure of sensitive information.

• Architect & Engineer DLP Solutions: Lead the design and engineering of complex Data Loss Prevention projects, utilizing Python, Java, and Alteryx to build automated workflows and data-driven security controls.
• API Strategy & Development: Drive the API roadmap for the Data Protection service; architecting, developing, and managing RESTful APIs to integrate security tools and streamline internal analytics.
• Full-Stack Security Engineering: Develop and maintain software within a GitHub-based environment, ensuring robust version control, documentation, and high-quality deployment of security-focused code.
• Advanced Data Analytics: Build and optimize Alteryx workflows and data models to increase reporting speed, providing deep insights into data movement and potential exfiltration patterns.
• Software Lifecycle Management: Oversee the end-to-end testing, deployment, and integration of working software and automated workflows, ensuring seamless performance across the security ecosystem.
• Microsoft Purview Administration: Lead the technical administration of Microsoft Purview, including the architecture and implementation of advanced DLP policies tailored to Ford’s global requirements.
• Stakeholder Architecture Reviews: Formalize and present complex technical architectures to stakeholders, securing approvals and ensuring alignment with Ford’s broader cybersecurity standards.
• Strategic Business Liaison: Translate complex business requirements into technical deliverables, negotiating feasibility and resource allocation with key stakeholders and business customers.
• Continuous Security Improvement: Define and implement process and technology enhancements to prevent the unauthorized disclosure, modification, or removal of Ford’s most sensitive data.
• Policy Tuning & Optimization: Aggregate and analyze global DLP telemetry to tune existing policies, reduce false positives, and determine where additional technical controls are required.
• Advanced Threat Analysis: Perform high-level triage and analysis of DLP alerts, managing the remediation of complex incidents and escalating critical risks to leadership.
• Global Metric Reporting: Design and deliver comprehensive data protection metrics to provide leadership with visibility into the global data loss risk posture.
• Technical Leadership: Maintain a high degree of technical curiosity, proactively learning and implementing emerging technologies to solve Ford’s most challenging data protection problems.

• Foundational Education: Bachelor’s Degree in Computer Science, Cybersecurity, Information Technology, or a related STEM field.
• Core Professional Experience:
  • 3+ years in a Cybersecurity role, specifically focused on Data Loss Prevention (DLP), Data Governance, or Security Engineering.
  • 3+ years of hands-on experience architecting and managing Microsoft Purview (MIP) and Microsoft Sentinel in a large-scale enterprise environment.
• Advanced Software Engineering: Proven expertise in Software Engineering Architecture, Lifecycle (SDLC), and Data Management within a GitHub-based environment.
• Full-Stack Development & Automation: Proficiency in Python or Java development with a focus on building automated security workflows and technical solutions.
• API Architecture & Management: Extensive experience designing, implementing, and managing RESTful APIs to enable system integration and advanced data analytics.
• Data Protection Platforms: Deep technical expertise in the administration and architecture of Microsoft Purview, Sentinel, and Defender for Endpoint, including the use of KQL (Kusto Query Language).
• Automated Data Analytics: Expert-level experience with Alteryx workflow development and data modeling to process global DLP telemetry and increase reporting speed.
• DLP Policy Engineering: Experience in Policy Tuning and Optimization, including the creation of advanced DLP policies and the analysis of data loss patterns to determine additional controls.
• Regulatory & Compliance Mastery: Demonstrated experience implementing security controls within a highly regulated environment (e.g., Banking, Finance, or Government), with a deep understanding of GLBA and global privacy compliance.
• Technical Solution Design: Ability to perform Architecture Knowledge mapping and translate complex business requirements into high-level technical deliverables.
• Cloud & Emerging Tech: Hands-on experience with GCP (Google Cloud Platform) and familiarity with developing or implementing machine learning algorithms to enhance data classification.
• Strategic Leadership: Strong Software Engineering Leadership skills with the ability to train, advise, and mentor team members on technical best practices.
• Stakeholder Management: Excellent written and oral communication skills, with a proven ability to present complex architectures to management and collaborate with global stakeholders.
• Analytical Problem Solving: Strong decision-making skills with a process-driven mindset and a "find-a-way" attitude toward solving challenging technical assignments.
• Professional Toolset: Proficiency in Data Visualization tools (e.g., Power BI, Tableau) and the Microsoft Office 365 suite for advanced data reporting.