Security Specialist - Data Protection

Senior Data Protection Engineer / Analyst

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success. As a Security Specialist within PNC's Technology organization, you will be based in Pittsburgh, PA, Strongsville, OH, Dallas, TX, Birmingham, AL, Denver, CO, Phoenix, AZ. We are seeking an experienced Senior Data Protection Engineer / Analyst to join our Enterprise Data Protection team. This role will be responsible for designing, implementing, monitoring, and continuously improving data protection controls across the organization. The ideal candidate will possess deep expertise in Data Loss Prevention (DLP), insider threat investigations, data discovery, classification, and governance, with hands-on experience in both Symantec DLP and Microsoft Purview environments.

Key Responsibilities:

• Design, implement, and maintain enterprise Data Loss Prevention (DLP) controls and policies.
• Administer and support Symantec DLP and Microsoft Purview Data Protection technologies.
• Monitor and investigate DLP alerts, policy violations, and insider threat activities.
• Perform structured and unstructured data discovery, classification, and risk assessments.
• Develop and maintain data classification and labeling standards.
• Configure and manage Exact Data Matching (EDM) repositories and detection rules.
• Implement and optimize endpoint DLP controls across enterprise endpoints.
• Collaborate with Security Operations, Risk Management, Compliance, Legal, and Human Resources teams during investigations.
• Analyze data flows and identify opportunities to strengthen data protection controls.
• Support data governance initiatives, regulatory compliance efforts, and risk management programs.
• Develop reporting and metrics related to data protection effectiveness and program maturity.
• Participate in incident response and digital investigation activities involving sensitive data exposures.

Required Qualifications:

• 3+ years of Data Loss Prevention (DLP) experience.
• 3+ years of Symantec DLP administration and engineering experience.
• 3+ years of Microsoft Purview experience supporting data protection and compliance capabilities.
• Experience supporting Insider Threat monitoring, investigations, and remediation activities.
• Experience performing structured and unstructured data scanning and discovery.

Technical Skills:

• Symantec DLP
• Microsoft Purview DLP
• Endpoint DLP
• Exact Data Matching (EDM)
• Data Classification and Labeling
• Structured and Unstructured Data Discovery
• Microsoft 365 Security & Compliance
• Insider Threat Monitoring and Investigations
• Incident Response and Digital Investigations
• Data Governance
• Sensitive Information Types (SITs)
• Data Protection Policy Development
• Risk Assessment and Control Design

Preferred Qualifications:

• Experience protecting data across Microsoft 365, SharePoint Online, OneDrive, Teams, and Exchange Online environments.
• Experience with Microsoft Defender security technologies.
• Understanding of information protection and sensitivity labeling.

Government Careers

Show more