Data Security Engineer

We are Systematix and we are currently looking for Data Security Engineers - DLP & Insider Threat to support the implementation, testing, validation, and ongoing improvement of enterprise data-protection controls for one of our key clients.

ABOUT THE PROJECT

Our client is a global leader in science and technology, supporting a complex and highly distributed enterprise technology environment. As part of ongoing initiatives to strengthen the protection of sensitive enterprise information, the organization is expanding its Data Security, Data Loss Prevention, and Insider Threat capabilities.

The successful candidates will take a hands-on role in testing and validating data-security controls across Microsoft Purview, CrowdStrike, and Data Security Posture Management platforms. They will work with security and technology teams to evaluate policy effectiveness, analyze results, tune controls, and help ensure security policies operate as intended without creating unnecessary business disruption.

This is a technical, data-driven role requiring strong DLP and data-security knowledge, excellent analytical capabilities, and hands-on experience working with enterprise security technologies.

ABOUT THE RESPONSIBILITIES

• Support the implementation, testing, validation, and continuous improvement of enterprise Data Security, Data Loss Prevention, and Insider Threat controls.
• Test and validate DLP and Insider Threat policies within Microsoft Purview, CrowdStrike, and Data Security Posture Management platforms.
• Work with DSPM technologies such as Varonis, BigID, or comparable platforms.
• Develop structured test scenarios and validation approaches for data-security policies and controls.
• Evaluate policy behaviour and effectiveness across different users, data types, applications, and business scenarios.
• Collect, consolidate, tabulate, and analyze security and policy-testing data.
• Use advanced Excel capabilities to analyze results, identify trends, document findings, and support reporting.
• Develop and use regular expressions to support data identification, classification, detection, and policy logic.
• Identify false positives, false negatives, gaps, and unexpected behaviour within security policies.
• Support tuning of DLP, DSPM, Insider Threat, and Data Classification controls to improve accuracy and effectiveness.
• Document testing methodologies, results, issues, recommendations, and remediation activities.
• Collaborate with Cybersecurity, Data Governance, Privacy, IAM, infrastructure, and business stakeholders.
• Support investigation and analysis of data-security events and policy violations as required.
• Assist with the development and maintenance of security procedures, standards, and supporting documentation.
• Contribute to reporting and metrics demonstrating the effectiveness of enterprise data-protection controls.

ABOUT THE REQUIREMENTS

• Hands-on experience with Data Security, Data Loss Prevention, Insider Threat, or closely related cybersecurity disciplines.
• Demonstrated experience testing and validating DLP, Insider Threat, or data-security policies.
• Experience with Microsoft Purview.
• Experience with CrowdStrike technologies relevant to data security and/or Insider Threat.
• Experience with Data Security Posture Management tools such as Varonis, BigID, or comparable platforms.
• Strong understanding of DLP policies, data classification, sensitive information detection, and policy tuning.
• Strong experience collecting, organizing, tabulating, and analyzing technical data.
• Strong proficiency across the Microsoft Office suite.
• Strong analytical and troubleshooting skills with the ability to identify patterns, anomalies, false positives, and control gaps.
• Ability to clearly document testing approaches, results, findings, and recommendations.
• Excellent written and verbal English communication skills.
• Strong attention to detail and ability to work independently within a cross-functional security environment.

PREFERRED QUALIFICATIONS

• Broader experience with cyber operations, Insider Threat, DLP, Data Privacy, or Data Governance.
• Experience tuning enterprise DLP, DSPM, and Data Classification technologies.
• Experience with Red Team/Blue Team activities or Threat Hunting.
• Understanding of Identity and Access Management.
• Database administration or strong database/data-management experience.
• Program or project management experience.
• Experience writing and maintaining cybersecurity policies, standards, procedures, or other formal directives.
• Experience supporting large, global enterprise security environments.

ABOUT THE ROLE

We are seeking two consultants for initial contract opportunities beginning as soon as possible and running through December 31, 2026, with a strong likelihood of extension based on ongoing business requirements.
The roles are expected to be performed remotely, with successful candidates available to work Eastern Time Zone business hours.

AI DISCLOSURE

As part of our recruitment process, Systematix may use artificial intelligence (AI) tools to assist with resume screening, candidate matching, and recruitment administration. All hiring decisions are ultimately made by our recruitment and hiring teams.

ABOUT SYSTEMATIX

Systematix is a Canadian-owned Global Consulting and Resourcing firm with nearly 50 years of experience delivering technology solutions to clients across North America and the United Kingdom. We provide the highest-caliber consulting solutions to a diverse client base across all levels of government and private industry. Systematix is committed to creating a diverse, inclusive environment and is proud to be an equal opportunity employer. At Systematix, we value diverse perspectives, experiences, and backgrounds.

Systematix. Solutions Focused. People Driven.

BH 22551