Data Security Engineer - VGOV

About us

One team. Global challenges. Infinite opportunities. At Viasat, we're on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We're looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.

What you'll do

We have an exciting opportunity for a Data Security Engineer to join our team! In this role you will, focus on safeguarding critical data, intellectual property (IP), and securing on-premises and cloud environments, including GCC High. This role focuses on implementing advanced security controls, ensuring regulatory compliance, and integrating security measures across operations.

The day-to-day

Data & Intellectual Property Protection

• Develop and manage security measures to ensure the confidentiality, integrity, and availability of sensitive data.
• Implement solutions to address data classification, labeling, sensitivity marking, and support data loss prevention (DLP), ABAC and zero trust.
• Provide policies and guidance to data owners.
• Collaborate with Legal, Privacy, and Security teams to ensure compliance with data contracts, privacy regulations, and security frameworks

M365 Cloud Security

• Configure and manage security controls for M365 services (e.g., Exchange Online, SharePoint, OneDrive, Teams).
• Use tools like Microsoft Defender for Cloud, Purview, Azure Security Center, Intune, and JAMF JSS for endpoint and application security.
• Ensure compliance with GDPR, CCPA, NIST, FedRAMP, and other relevant standards through data security policy enforcement.

Incident Response & Security Enhancements

• Actively monitor for and respond to suspected security breaches, ensuring timely resolution of incidents.
• Stay informed about emerging security threats and mitigation strategies, adapting the organization's security posture to align with ever-evolving risks.
• Train and educate internal stakeholders on evolving security policies and standard processes.

What you'll need

• Bachelor's degree or higher in Cyber Security, Information Technology, or a related field, or equivalent experience.
• 6+ years of relevant experience in:
  • Data Security, IT Security, or Information Protection.
  • Securing M365 and Azure environments with a focus on security practices.
• Strong knowledge and expertise in implementing data and cloud security principles, frameworks, and best practices.
• Solid understanding of configuring Microsoft Defender for Cloud, Microsoft Intune, JAMF JSS, Azure Security Center, and securing key cloud applications.
• Hands-on experience creating, configuring, and tuning Data Loss Prevention (DLP) rules and policies using endpoint and network solutions (e.g., MS Defender for Endpoint, Netskope, or similar).
• Familiarity with data classification taxonomies, sensitivity labeling models, and secure data transmission protocols.
• Knowledge of identity and access management principles, including integration between Purview, Azure AD, and conditional access controls for enhanced data protection.
• Excellent familiarity with regulatory frameworks such as GDPR, CCPA, and FedRAMP.
• Proficiency in scripting for automation, such as PowerShell or other tools for managing M365 security configurations.
• Strong problem-solving, analytical, and communication skills, with experience collaborating across diverse teams.
• US Citizenship

• Must be able to obtain a United States Secret Clearance

• Travel up to 10%, as needed.

What will help you on the job

• Relevant certifications, such as CISSP, CISM, CISA, or AZ-500: Microsoft Azure Security Technologies certification.
• Experience with Microsoft Purview Information Protection and M365 security and compliance tools, including Exchange Online, SharePoint, OneDrive, Teams, and the Purview compliance portal.
• Experience with advanced cloud security tools and strategies, such as Azure Key Vault, Azure Policy, and Azure Role-Based Access Control (RBAC).
• Knowledge of intellectual property protection strategies and laws.
• Up-to-date knowledge of emerging data security and cloud security trends, threats, and best practices.
• Proficiency in risk management tools and methodologies.
• Strong collaboration skills and the ability to work across cross-functional teams.
• Self-motivation with the ability to manage multiple tasks efficiently and effectively.

Salary range

$165,000.00 - $260,500.00 / annually.
For specific work locations within San Jose, the San Francisco Bay area and New York City metropolitan area, the base pay range for this role is $205,000.00- $307,000.00/ annually

At Viasat, we consider many factors when it comes to compensation, including the scope of the position as well as your background and experience. Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered. Learn more about Viasat's comprehensive benefit offerings that are focused on your holistic health and wellness at
EEO Statement

Viasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application, please click here.