Data Protection & DLP Engineer

About the role

We are looking for a hands‑on Data Protection & DLP Engineer to join a global energy trading company in Geneva. Reporting directly to the CISO, you will design, deploy and operate enterprise‑wide data classification and loss‑prevention solutions in a fast‑paced trading environment.

Key responsibilities

• Design and implement data classification, labeling and encryption frameworks.
• Build and automate data discovery, protection and encryption policies across cloud, email, web and endpoint channels.
• Configure and tune DLP tools (e.g., Microsoft Purview, Zscaler, Varonis) to reduce false positives.
• Develop scripts and automation to streamline protection workflows.
• Plan and manage rollout of data‑protection technologies, defining road‑maps and sequencing with business owners.
• Monitor DLP alerts, investigate data‑exfiltration incidents and conduct root‑cause analysis.
• Provide metrics, reporting and recommendations to the CISO and senior leadership.

Required profile

• At least 40% of career dedicated to DLP, data protection or information security.
• Strong hands‑on experience with 1‑2 DLP platforms such as Microsoft Purview, Zscaler or Varonis.
• Solid Microsoft 365 and Azure security background.
• Proven ability to deploy security solutions end‑to‑end and manage incident investigations.
• Experience working autonomously in high‑pressure, regulated trading environments.

Required skills

• Microsoft Purview
• Zscaler
• Varonis
• Microsoft 365 security
• Azure security services
• Scripting/automation (PowerShell, Python or similar)
• Data classification and labeling
• Encryption technologies
• DLP configuration for cloud, email, web and endpoint