Data Protection Security Engineer

About the role

Reporting to the Manager, Information Security, you will join the Identity Management team and help build and operationalize the enterprise data protection program. You will focus on identifying and classifying sensitive data, administering data protection technologies, implementing and tuning protection controls, and investigating potential data exposure.

Working with data owners, security teams, and technology partners, you will help strengthen how sensitive information is identified, labeled, protected, monitored, and securely shared across cloud, on-premises, endpoint, email, and software-as-a-service environments.

A Taste of Your Responsibilities

• Administer and support enterprise data protection technologies, including Microsoft Purview, Varonis, Proofpoint Data Loss Prevention, or comparable platforms.
• Discover and classify sensitive data and implement sensitivity labels, encryption, secure-sharing controls, and other information protection measures.
• Configure, test, and tune data loss prevention policies to improve control effectiveness, reduce false positives, and manage exceptions.
• Monitor data protection alerts and investigate potential data exposure, inappropriate sharing, policy violations, or suspected data exfiltration. Coordinate remediation and escalation when needed.
• Partner with data owners and technology teams to identify sensitive information, understand how it is accessed and shared, and remediate oversharing or inappropriate access.
• Translate business, privacy, legal, and data governance requirements into technical data protection controls.
• Support retention, records management, and secure information-sharing requirements through data protection technologies and controls.
• Apply least-privilege and identity-based safeguards to sensitive data in partnership with Identity and Access Management teams.
• Support the continued development of the data protection program, including documentation, platform improvements, metrics, reporting, runbooks, and user guidance.
• Contribute to automation and emerging data protection capabilities, including artificial intelligence data-security controls, as the program evolves.

Ingredients Required for Your Success

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or a related field, or equivalent professional experience.
• Three or more years of enterprise technology experience, including at least two years in cybersecurity, data protection, data governance, or a related area.
• Hands-on experience administering, configuring, or supporting an enterprise data protection or data loss prevention platform such as Microsoft Purview, Varonis, Proofpoint Data Loss Prevention, or comparable technology.
• Experience with sensitive-data discovery, classification, sensitivity labeling, or related information protection controls.
• Working knowledge of the data loss prevention policy lifecycle, such as policy configuration, testing, tuning, alert investigation, exception handling, and remediation.
• Working knowledge of data protection and governance concepts, including secure information sharing, retention, or records management.
• Working knowledge of identity and access concepts, including least privilege and access-related data protection risks.
• Strong troubleshooting, analytical, problem-solving, organizational, written, and verbal communication skills, including communicating technical risks and recommendations to technical and non-technical audiences.
• Experience working independently and collaboratively within a matrixed organization.
• Hands-on Microsoft Purview experience preferred.
• Experience with Varonis, Proofpoint Data Loss Prevention, or other enterprise data discovery and protection technologies preferred.
• Experience protecting data across cloud, on-premises, endpoint, email, and software-as-a-service environments preferred.
• Experience supporting privileged access management, identity governance, or other identity-based security controls preferred.
• Experience with PowerShell, Python, REST APIs, connectors, workflow automation, or other security automation technologies preferred.
• Experience supporting insider-risk, data-exposure, or data-exfiltration investigations preferred.
• Familiarity with Zero Trust, National Institute of Standards and Technology, International Organization for Standardization 27001, or similar security frameworks preferred.
• Relevant certification in information security, data protection, cloud security, governance, or identity preferred.
• Exposure to data protection controls for artificial intelligence applications, agents, or other emerging artificial intelligence technologies preferred.
• Willingness to travel up to 10%.

Physical Requirements This role does not require work at or regular visits to manufacturing plants.

• Number of Days in Office: 3
• #LI-Hybrid
• #LI-SG1
• #LI-Associate

Pay Range:$73,600-$109,300

The annual salary listed above is the expected offering for this position. An employee's actual annual salary will be based on but not limited to: location, relevant experience/level and skillset, while balancing internal Conagra employees' equity. Conagra Brands will comply with applicable law regarding minimum salaries for exempt employees.

Our Benefits

We care about your total well-being and will support you with the following, subject to your location and role:

• Health: Comprehensive healthcare plans, wellness incentive program, mental wellbeing support and fitness reimbursement
• Wealth: Great pay, bonus incentive opportunity, matching 401(k) and stock purchase plan
• Growth: Career development opportunities, employee resource groups, on-demand learning and tuition reimbursement
• Balance: Paid-time off, parental leave, flexible work-schedules (subject to your location and role) and volunteer opportunities