Senior Data Security Engineer - DLP

About the Company
Taxwell is a leading digital tax filing platform formed in 2022 from the combination of Drake Software® and TaxAct®. These two longstanding organizations offer customers professional and do-it-yourself digital and downloadable products that are easy-to-use, best-in-class technology, and provide unparalleled customer support. Taxwell brands are a trusted solution for all users including those with complex tax returns. We strive to attract and retain candidates who exemplify our values: performance, perseverance, progress and partnership. Taxwell is an organization of forward thinkers looking to add industry experts to our growing team.
About the Role
Position Summary We are seeking a Senior Data Security Engineer with deep, hands-on experience protecting sensitive enterprise data throughout its lifecycle. This role requires more than administering DLP policies or applying sensitivity labels. We are looking for someone who can identify where sensitive data exists, understand how it is stored, accessed, used, and moved, recognize potential exposure or control gaps, and determine and implement the appropriate protections before those risks become security incidents. The ideal candidate combines strong data security and DLP expertise with hands-on Microsoft Purview, Microsoft 365, and security engineering experience. This individual will work across technical and business teams to translate data risk and requirements into practical, effective controls.
Responsibilities
Identify and assess sensitive data across enterprise environments, including how it is stored, accessed, used, shared, and transferred.
Recognize data exposure, inappropriate access, and control gaps and determine the appropriate technical protections.
Design, implement, administer, and continuously improve enterprise DLP and data protection controls.
Protect sensitive data at rest, in use, and in motion across Microsoft 365, endpoints, cloud services, applications, and other enterprise data sources.
Design, configure, test, and tune Microsoft Purview DLP and information protection controls across Exchange, SharePoint, OneDrive, Teams, endpoints, and supported cloud applications.
Develop and maintain data classification and detection capabilities, including sensitive information types, classifiers, policy conditions, exceptions, and related controls.
Test and tune policies to improve protection, reduce false positives, and minimize unnecessary business disruption.
Investigate DLP events and data security issues, identify root causes and emerging risks, and implement appropriate remediation.
Evaluate applications, cloud services, and emerging AI use cases to determine sensitive-data risks and required protections.
Partner with Security, Privacy, Legal, GRC, IT, Cloud, application teams, and business stakeholders to translate data protection requirements into technical solutions.
Use Microsoft Defender, Entra ID, Azure/AWS, PowerShell, Microsoft Graph, APIs, and other technologies to support data protection, automation, monitoring, and reporting.
Qualifications
Required Qualifications 5+ years of hands-on experience in data security, data protection, DLP, information protection, or closely related security engineering.
Strong experience identifying sensitive data, evaluating how it is stored, accessed, used, and moved, and determining appropriate data protection controls.
Hands-on experience designing, implementing, testing, and tuning enterprise DLP controls.
Hands-on experience with Microsoft Purview DLP and information protection in an enterprise environment.
Strong understanding of protecting sensitive data at rest, in use, and in motion.
Experience protecting data across Microsoft 365 workloads such as Exchange, SharePoint, OneDrive, Teams, and endpoints.
Experience with data discovery, classification, sensitive information types or classifiers, access and sharing controls, and data protection policies.
Ability to identify data security risks and control gaps and independently recommend and implement appropriate solutions.
Strong troubleshooting, analytical, communication, and documentation skills.
Required Skills
Hands-on experience in data security, data protection, DLP, information protection, or closely related security engineering.
Experience identifying sensitive data and evaluating how it is stored, accessed, used, and moved.
Experience determining and implementing appropriate data protection controls.
Experience designing, implementing, testing, and tuning enterprise DLP controls.
Experience with Microsoft Purview DLP and information protection in an enterprise environment.
Understanding of protecting sensitive data at rest, in use, and in motion.
Experience protecting data across Microsoft 365 workloads such as Exchange, SharePoint, OneDrive, Teams, and endpoints.
Experience with data discovery, classification, sensitive information types or classifiers, access and sharing controls, and data protection policies.
Ability to identify data security risks and control gaps and independently recommend and implement appropriate solutions.
Troubleshooting, analytical, communication, and documentation skills.
Preferred Skills
Experience with Microsoft Defender, Entra ID, Intune, Azure, and/or AWS.
Experience with additional data security technologies such as Varonis, Netskope, Forcepoint, Symantec/Broadcom, CASB, DSPM, or data access governance solutions.
Experience with PowerShell, Python, Microsoft Graph, APIs, or security automation.
Experience with eDiscovery, retention, data lifecycle management, or information governance.
Experience protecting sensitive data in regulated environments.
Microsoft security certifications such as SC-400, SC-300, or MS-102.
Equal Opportunity Statement
Work Environment Remote position available to candidates located in the United States. This is a hands-on engineering role with significant individual ownership and the opportunity to influence how sensitive data is identified, assessed, and protected across the enterprise. At Taxwell, we believe our work benefits from the diverse perspectives of our employees. As such, Taxwell welcomes and celebrates diversity and inclusion and is committed to equal opportunity employment. At Taxwell, you can expect a supportive, open, and inclusive atmosphere and a team that values your contributions. Taxwell is committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants without regard to race, color, religion, sex, national origin, age, disability, marital status, sexual orientation, gender identity, veteran status, and any other status protected under applicable law. Taxwell

Work arrangement
Yes