Information Security Senior Engineer - Dallas, TX

Job Description We are seeking a Senior Data Protection Engineer to design, implement, and scale enterprise data protection capabilities with a strong focus on CASB, DSPM, eDLP, Secure File Sharing, and Data Movement Controls. Equinix is the world’s digital infrastructure company®, shortening the path to connectivity to enable the innovations that enrich our work, life and planet. Responsibilities DSPM (Data Security Posture Management) Implement and optimize DSPM to continuously discover and classify sensitive data across SaaS applications, cloud storage, object stores, and unstructured data repositories. Analyze Data Security Posture to identify overshared data, sensitive data sprawl, misconfigured access controls and drive risk‑based remediation workflows. Establish continuous monitoring of data exposure and compliance posture. Advanced Data Detection & Protection Design and deploy eDLP policies to inspect and control data in motion across web and cloud channels. Implement Exact Data Match (EDM) for structured sensitive data, Indexed Document Matching (IDM) for unstructured documents, regex, keyword and contextual classification rules, build and maintain EDM/IDM repositories. Configure real‑time enforcement actions: block, quarantine, alert or coach users and continuously reduce false positives/negatives. Secure File Sharing & Data Movement Controls Enforce secure data transfer policies across web uploads/downloads, SaaS file sharing, collaboration tools, and third‑party exchanges. Safeguard against unauthorized exfiltration, risky upload behavior, unapproved sharing channels while supporting business collaboration. CASB & SaaS Security Design and implement CASB controls for M365, Google Workspace, Salesforce. Enforce granular access and session controls: inline transaction control, session‑based enforcement, adaptive policies based on user, device, and risk context. Identify and mitigate risks: Shadow IT, OAuth abuse, SaaS misconfigurations, oversharing; align CASB policies with Zero Trust principles and least‑privilege access models. Automation & Integration Engineering Develop automation using Python and APIs to manage policies programmatically, automate lifecycle of EDM/IDM datasets, trigger remediation workflows based on DSPM findings, integrate with SIEM/SOAR, build tooling for visibility and reporting. Security Monitoring & Risk Reduction Review and tune DLP and CASB alerts, define and track key data protection metrics (data exposure trends, policy enforcement effectiveness, exfiltration attempts). Conduct risk assessments and continuous control validation; refine policies to maintain efficacy and low business disruptions. Qualifications Degree: Bachelor’s or Master’s in Computer Science, Information Security, or related field. Experience: 7–10+ years in data protection or security engineering. Hands‑on experience with CASB (inline/API), DSPM, eDLP, Exact Data Match (EDM), Indexed Document Matching (IDM). Deep understanding of data classification, content inspection, exfiltration vectors, SaaS and cloud data security risks, and Zero Trust strategies. Technical skills: Python scripting, REST APIs, SIEM/SOAR, cloud environments (AWS, Azure, GCP), identity, access control, and conditional access models. Candidate attributes: deeply hands‑on, data‑first approach, analytical and tuning expertise, proactive and continuously improving, thriving in fast‑paced environment. Location and Compensation Dallas, Texas – United States. Pay range: 136,000 - 204,000 USD per year (minimum $100,000). #J-18808-Ljbffr VetJobs