Senior Data Security Engineer

Primary objective of this role is to quickly become a Subject Matter Expert (SME) in the CNA Data Classification and Remediation team. The engineer’s expertise will be leveraged to develop and continue the data classification program as well as enhance data loss prevention, data protection, governance and retention for both structured and unstructured data, mitigating risks by utilizing appropriate processes, tools and custom solutions. Responsibilities Provide technical expertise and support to client, IT management and staff in risk assessments, implementation and operational aspects of appropriate information security procedures and products. Participate in the evaluation, development and implementation of security standards, procedures and guidelines for multiple platforms and diverse systems environments (e.g., firm‑wide, distributed, client‑server systems, and e‑applications). Test and implement appropriate security methods and control techniques such as data access rule tables, data containerization, data encryption, data backup and recovery. Partner with different teams in the organization to accomplish tasks. Drive projects as an individual contributor and oversee MSPs leveraged. Understand the OSI model of networking, Data Loss Prevention and Data Classifications from a technical perspective. Act as liaison to product groups and assist them in implementation of data privacy, information security technologies, and application security. Comprehend regulatory compliance requirements related to data. Develop and manage data classification schemes, ensuring accurate labeling and the application of sensitivity labels to protect sensitive information. Create data discovery and labeling schemes and perform remediation tasks related to user access to sensitive data. Collaborate with DLP teams to prevent data exfiltration, configure systems to detect sensitive data and trigger appropriate actions, and regularly review policies for effectiveness and alignment with evolving requirements. Maintain awareness of existing and proposed security standard‑setting groups, state and federal legislation and regulations pertaining to information security. Identify regulatory changes that will affect information security policy, standards and procedures, and recommend appropriate changes. Qualifications Experience in extracting, analyzing, manipulating, and organizing large amounts of data from disparate sources using various investigative tools. Drive Data Loss Prevention (DLP) rule development lifecycle including policy development, response rules and maintenance. Conduct research to improve accuracy across systems and minimize false positives through use of technology and data analytics. Experience in implementing and managing various data security platforms, systems, applications to deploy appropriate technical controls. Ability to communicate complex findings in meaningful, easy‑to‑understand formats, including written summaries, visualizations and presentations. Develop and maintain a deep understanding of the company’s most valuable intellectual property to proactively identify and investigate potential risks. Demonstrated ability to maintain confidentiality of sensitive data and information. Stay updated with the latest industry trends and best practices in data security. Education and Preferred Experience Bachelor’s degree in Computer Science or a related discipline, or equivalent work experience. Typically a minimum of seven years of technical experience in security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination. Familiarity with Microsoft Purview and Securiti.ai (training will be provided if necessary). Experience with structured and unstructured data connectors, data classification, and regex adjustments to identify risks. Experience with data protection and security operations through use of DLP tools and Data Classification technologies. Nice to Have (Technologies) Microsoft Purview Microsoft CoPilot BigID Securiti.AI Varonis SkyHigh Forcepoint Blue Coat Proofpoint Netskope Benefits and Accommodations CNA offers a comprehensive and competitive benefits package to employees and their family members to achieve physical, financial, emotional and social wellbeing goals. CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact View email address on click.appcast.io. #J-18808-Ljbffr 01460 Continental Casualty Company