Senior Information Security Engineer - Data Protection & Insider Risk - Hybrid

Genesis10 is currently seeking a Senior Information Security Engineer - Data Protection & Insider Risk - Hybrid position with a Global Law Firm located in New York, NY. This is a direct hire opportunity.

We are seeking an experienced, dynamic Senior Information Security Engineer with expertise in data leakage prevention (DLP), insider risk management, and identity and access governance (IAG). This role is responsible for protecting sensitive data across endpoints, cloud services, and SaaS platforms by designing, implementing, and operating security controls that identify, classify, monitor, and govern access to enterprise data. This position also plays a hands-on role in securing Microsoft Copilot for M365 and other emerging AI-enabled tools, focusing on technical controls, data protection enforcement, and security logging. The ideal candidate has experience managing data classification and labeling programs, insider risk detection, identity governance platforms, and modern security tooling, and is comfortable working across IT, security, and compliance functions to enable the business securely.

Responsibilities:

• Designs, implements, and operates Data Loss/Leakage Prevention (DLP) controls across endpoints, email, cloud services, and SaaS platforms
• Leads and maintains data identification, classification, and labeling strategies for structured and unstructured data
• Monitors, investigates, and responds to data exfiltration and misuse events, including both accidental and malicious activity
• Tunes detection policies to reduce false positives while maintaining effective risk coverage
• Operates and enhances insider risk detection and response programs, including behavioral analytics and user activity monitoring
• Partners with IT/IS management on insider risk investigations, ensuring appropriate governance and privacy controls
• Develops workflows for escalation, evidence handling, and remediation of insider risk incidents
• Manages and optimizes identity and access governance (IAG) platforms, including access reviews, entitlement management, and lifecycle automation
• Supports least-privilege access models, role-based access control (RBAC), and segregation of duties (SoD) initiatives
• Integrates identity signals with data protection and insider risk tooling to enable contextual, risk-based controls
• Serves as a subject matter expert for security platforms related to DLP, insider risk, data classification, and identity governance
• Evaluates, onboards, and operationalizes new security tools and features
• Creates and maintains runbooks, procedures, dashboards, and metrics to demonstrate program effectiveness
• Supports regulatory and compliance requirements related to data protection and access control (e.g., SOX, HIPAA, GDPR, CCPA, etc., as applicable)
• Provides guidance to IT and business teams on secure data handling and access practices
• Contributes to security awareness efforts related to data handling, insider risk, and acceptable use
• Implements and operates security controls for Microsoft Copilot for M365 using Purview, Defender, and Entra ID to enforce access boundaries and reduce data exposure
• Configures DLP, sensitivity labels, permissions, logging, and alerting to ensure AI-assisted access aligns with data classification and authorization models
• Investigates and responds to data exposure or misuse involving Copilot or other AI-enabled workflows, and support secure onboarding of additional AI/LLM tools
• Performs additional duties as assigned

Requirements:

• At least 7 years of experience in information security, with direct focus on data protection, insider risk, or identity governance
• Hands-on experience with one or more DLP and data classification platforms (e.g., Microsoft Purview, Symantec, Forcepoint, Netskope, etc.)
• Experience managing identity and access governance solutions (e.g., Microsoft Entra ID Governance, SailPoint, Saviynt, Okta IGA)
• Working knowledge of Microsoft security ecosystem (Purview, Defender for Endpoint, Defender for Cloud Apps, Entra ID, Sentinel)
• Strong understanding of data classification schemes, sensitive data types, and data handling controls
• Experience investigating security alerts and incidents involving user behavior and data misuse
• Familiarity with endpoint, cloud, and SaaS security architectures
• Strong documentation, communication, and cross-functional collaboration skills
• Ability to work additional hours as needed

Desired skills:

• Experience with User and Entity Behavior Analytics (UEBA) or insider risk platforms
• Knowledge of privacy-by-design principles and employee monitoring considerations
• Scripting or automation experience (PowerShell, Python, KQL, etc.)
• Security certifications such as CISSP, CISM, CCSP, GIAC, or vendor-specific certifications
• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related technical field

Pay range: $160,000 - $200,000 per year

If you have the described qualifications and are interested in this exciting opportunity, please apply!

Ranked a Top Staffing Firm in the U.S. by Staffing Industry Analysts for six consecutive years, Genesis10 puts thousands of consultants and employees to work across the United States every year in contract, contract-for-hire, and permanent placement roles. With more than 300 active clients, Genesis10 provides access to many of the Fortune 100 firms and a variety of mid-market organizations across the full spectrum of industry verticals.

For contract roles, Genesis10 offers the benefits listed below. If this is a perm-placement opportunity, our recruiter can talk you through the unique benefits offered for that particular client. Benefits of Working with Genesis10:

• Access to hundreds of clients, most who have been working with Genesis10 for 5-20 years.
• The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years.
• Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)
• Behavioral Health Platform
• Medical, Dental, Vision
• Health Savings Account
• Voluntary Hospital Indemnity (Critical Illness & Accident)
• Voluntary Term Life Insurance
• 401K
• Sick Pay (for applicable states/municipalities)
• Commuter Benefits (Dallas, NYC, SF, and Illinois)

For multiple years running, Genesis10 has been recognized as a Top Staffing Firm in the U.S., as a Best Company for Work-Life Balance, as a Best Company for Career Growth, for Diversity, and for Leadership, amongst others. To learn more and to view all our available career opportunities, please visit us at our website.

Genesis10 is an Equal Opportunity Employer. Candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.