Data Protection & DLP Engineer

About the role

We are looking for a hands‑on Data Protection & DLP Engineer to join a global energy trading company in Geneva. Reporting directly to the CISO, you will design, deploy and operate enterprise‑wide data classification and loss‑prevention solutions in a fast‑paced trading environment.

Key responsibilities

• Design and implement data classification, labeling and encryption frameworks.
• Automate data discovery, protection and policy enforcement across cloud, email, web and endpoint channels.
• Configure and manage DLP platforms such as Microsoft Purview, Zscaler or Varonis.
• Plan and coordinate rollout of data‑protection technologies, defining road‑maps and sequencing with business and technical owners.
• Translate regulatory and business requirements into technical controls.
• Monitor DLP alerts, investigate data‑exfiltration attempts and conduct root‑cause analysis.
• Tune detection rules to reduce false positives and provide regular metrics to senior leadership.

Required profile

• At least 40% of career spent on DLP, data protection or information security.
• Strong hands‑on experience with one or more DLP platforms (Microsoft Purview, Zscaler, Varonis).
• Solid Microsoft 365 and Azure security background.
• Proven ability to deploy security solutions end‑to‑end and manage incident investigations.
• Experience working autonomously in high‑pressure, regulated trading environments.

Required skills

• Microsoft Purview, Zscaler, Varonis (or equivalent DLP platforms)
• Microsoft 365 security
• Azure security services
• Scripting/automation (PowerShell, Python or similar)
• Data classification, labeling and encryption technologies
• Incident response and root‑cause analysis