UKG
Sr Security Engineer - Data Loss Prevention (DLP)
UKG, San Francisco, California, United States, 94199
Sr Security Engineer - Data Loss Prevention (DLP)
Join to apply for the
Sr Security Engineer - Data Loss Prevention (DLP)
role at
UKG Sr Security Engineer - Data Loss Prevention (DLP)
1 day ago Be among the first 25 applicants Join to apply for the
Sr Security Engineer - Data Loss Prevention (DLP)
role at
UKG Company Overview
With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on. Company Overview
With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on.
At UKG, you get more than just a job. You get to work with purpose. Our team of U Krewers are on a mission to inspire every organization to become a great place to work through our award-winning HR technology built for all.
Here, we know that you’re more than your work. That’s why our benefits help you thrive personally and professionally, from wellness programs and tuition reimbursement to U Choose — a customizable expense reimbursement program that can be used for more than 200+ needs that best suit you and your family, from student loan repayment, to childcare, to pet insurance. Our inclusive culture, active and engaged employee resource groups, and caring leaders value every voice and support you in doing the best work of your career. If you’re passionate about our purpose — people —then we can’t wait to support whatever gives you purpose. We’re united by purpose, inspired by you.
At UKG, security is at the core of everything we do. We are seeking a Security Engineer with a focus on Data Loss Prevention (DLP) to join our team. This individual will design, implement, and maintain security solutions and controls that safeguard sensitive data across the enterprise. The role requires expertise in DLP technologies, cloud access security, and zero-trust principles, with a strong ability to integrate these into enterprise-wide security strategies.
Job Responsibilities
Review, test, and implement security solutions related to: Data Loss Prevention (DLP): Microsoft Purview Information Protection, Conditional Access, policy configuration, monitoring, and incident response. Data Classification & Labeling: Define, implement, and maintain enterprise-wide data classification and labeling standards; leverage AI/ML-driven solutions to automatically classify and tag sensitive information. CASB Solutions: Manage inline (proxy-based) and out-of-band (API-based) CASB models to control access to and usage of SaaS applications. ZTNA Solutions: Integration and operation of Zero Trust Network Access solutions (e.g., Zscaler, Prisma Access, Axis) with DLP enforcement. Email Security: Integrate DLP and data classification policies with enterprise email security platforms. Public Cloud Security: Apply DLP and CASB controls in AWS, Azure, and GCP environments. Develop, enforce, and continuously improve data protection policies and security baselines. Monitor DLP systems for policy violations, anomalous activity, and potential data exfiltration; investigate incidents and drive remediation. Recommend enhancements to improve visibility and effectiveness of data classification, labeling, and protection capabilities. Maintain documentation of configurations, security policies, and operational procedures. Automate manual security tasks and policy enforcement where possible (infrastructure as code, scripting, orchestration).
Knowledge, Skills, And Abilities
Strong understanding of data security principles, data classification, and labeling frameworks. Hands-on experience with enterprise DLP platforms (Microsoft Purview strongly preferred). Experience with AI-driven data classification solutions and integration into security workflows. Familiarity with CASB deployment models (inline and out-of-band) and their application to SaaS platforms. Knowledge of Zero Trust frameworks and their application to DLP and access controls. Solid understanding of cloud security controls in AWS, Azure, and GCP. Familiarity with network and application protocols (TCP/IP, HTTP/S, DNS, etc.) and how they impact data protection. Experience with automation tools such as PowerShell, Terraform, Ansible, or equivalent is preferred. Excellent analytical, communication, and collaboration skills. Results-oriented, self-motivated, and capable of working in a fast-paced environment.
Qualifications
Minimum 5 years of experience in a Security Engineering role, with at least 3+ years focused on DLP, data classification, and data security technologies. Direct experience with data labeling and classification projects, ideally with AI/ML-driven automation. Working knowledge of security frameworks (NIST, ISO 27001, CIS, OWASP). Bachelor’s or Master’s degree in Information Systems, Information Security, or related field (preferred but not required). Industry-recognized certifications (CISSP, CISA, CISM, CCSP, or Security+) are strongly preferred.
Where we’re going
UKG is on the cusp of something truly special. Worldwide, we already hold the #1 market share position for workforce management and the #2 position for human capital management. Tens of millions of frontline workers start and end their days with our software, with billions of shifts managed annually through UKG solutions today. Yet it’s our AI-powered product portfolio designed to support customers of all sizes, industries, and geographies that will propel us into an even brighter tomorrow!
Equal Opportunity Employer
UKG is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, disability, religion, sex, age, national origin, veteran status, genetic information, and other legally protected categories.
View The EEO Know Your Rights poster
UKG participates in E-Verify. View the E-Verify posters here .
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Disability Accommodation in the Application and Interview Process
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com .
The pay range for this position is $99,800.00 to $143,450.00 USD, however, base pay offered may vary depending on skills, experience, job-related knowledge and location. This position is also eligible for a short-term incentive and a long-term incentive as part of total compensation. Information about UKG’s comprehensive benefits can be reviewed on our careers site at https://www.ukg.com/careers Seniority level
Seniority level Not Applicable Employment type
Employment type Full-time Job function
Job function Information Technology Industries Computer Hardware Manufacturing, Software Development, and IT Services and IT Consulting Referrals increase your chances of interviewing at UKG by 2x Get notified about new Senior Security Engineer jobs in
San Francisco, CA . Senior Security Engineer (Presales) - Northwest region (San Francisco, CA)
Sr Staff, InfoSec Engineer - Security Architecture
San Francisco, CA $174,400.00-$231,200.00 3 months ago San Francisco, CA $189,823.00-$227,787.00 2 months ago Senior Product Engineer - Security and Compliance
San Francisco, CA $159,000.00-$278,250.00 2 days ago Solution Architect, Security Access Service Edge (West)
Sr Staff, Infosec Engineer - Selling Channel Security
San Francisco, CA $174,400.00-$231,200.00 3 months ago San Francisco, CA $150,000.00-$250,000.00 7 months ago San Francisco, CA $187,000.00-$227,000.00 1 month ago Security Engineer, Detection and Response
San Francisco, CA $255,000.00-$405,000.00 22 hours ago San Francisco, CA $100,000.00-$160,000.00 1 month ago Senior Security Engineer, Infrastructure
San Francisco, CA $200,000.00-$350,000.00 23 hours ago San Bruno, CA $174,000.00-$247,000.00 1 month ago Senior Infrastructure & Security Engineer
Staff Security Engineer (Identity & Access Governance)
San Francisco, CA $211,500.00-$334,600.00 2 weeks ago San Mateo, CA $145,000.00-$150,000.00 2 months ago Senior Security Engineer, Detection & Response
San Francisco, CA $200,000.00-$350,000.00 1 day ago San Francisco, CA $175,000.00-$250,000.00 2 months ago San Francisco, CA $225,000.00-$550,000.00 22 hours ago Senior Security Engineer - Corporate Security
San Francisco, CA $325,000.00-$495,000.00 21 hours ago San Francisco, CA $185,000.00-$265,000.00 6 months ago We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr
Join to apply for the
Sr Security Engineer - Data Loss Prevention (DLP)
role at
UKG Sr Security Engineer - Data Loss Prevention (DLP)
1 day ago Be among the first 25 applicants Join to apply for the
Sr Security Engineer - Data Loss Prevention (DLP)
role at
UKG Company Overview
With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on. Company Overview
With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on.
At UKG, you get more than just a job. You get to work with purpose. Our team of U Krewers are on a mission to inspire every organization to become a great place to work through our award-winning HR technology built for all.
Here, we know that you’re more than your work. That’s why our benefits help you thrive personally and professionally, from wellness programs and tuition reimbursement to U Choose — a customizable expense reimbursement program that can be used for more than 200+ needs that best suit you and your family, from student loan repayment, to childcare, to pet insurance. Our inclusive culture, active and engaged employee resource groups, and caring leaders value every voice and support you in doing the best work of your career. If you’re passionate about our purpose — people —then we can’t wait to support whatever gives you purpose. We’re united by purpose, inspired by you.
At UKG, security is at the core of everything we do. We are seeking a Security Engineer with a focus on Data Loss Prevention (DLP) to join our team. This individual will design, implement, and maintain security solutions and controls that safeguard sensitive data across the enterprise. The role requires expertise in DLP technologies, cloud access security, and zero-trust principles, with a strong ability to integrate these into enterprise-wide security strategies.
Job Responsibilities
Review, test, and implement security solutions related to: Data Loss Prevention (DLP): Microsoft Purview Information Protection, Conditional Access, policy configuration, monitoring, and incident response. Data Classification & Labeling: Define, implement, and maintain enterprise-wide data classification and labeling standards; leverage AI/ML-driven solutions to automatically classify and tag sensitive information. CASB Solutions: Manage inline (proxy-based) and out-of-band (API-based) CASB models to control access to and usage of SaaS applications. ZTNA Solutions: Integration and operation of Zero Trust Network Access solutions (e.g., Zscaler, Prisma Access, Axis) with DLP enforcement. Email Security: Integrate DLP and data classification policies with enterprise email security platforms. Public Cloud Security: Apply DLP and CASB controls in AWS, Azure, and GCP environments. Develop, enforce, and continuously improve data protection policies and security baselines. Monitor DLP systems for policy violations, anomalous activity, and potential data exfiltration; investigate incidents and drive remediation. Recommend enhancements to improve visibility and effectiveness of data classification, labeling, and protection capabilities. Maintain documentation of configurations, security policies, and operational procedures. Automate manual security tasks and policy enforcement where possible (infrastructure as code, scripting, orchestration).
Knowledge, Skills, And Abilities
Strong understanding of data security principles, data classification, and labeling frameworks. Hands-on experience with enterprise DLP platforms (Microsoft Purview strongly preferred). Experience with AI-driven data classification solutions and integration into security workflows. Familiarity with CASB deployment models (inline and out-of-band) and their application to SaaS platforms. Knowledge of Zero Trust frameworks and their application to DLP and access controls. Solid understanding of cloud security controls in AWS, Azure, and GCP. Familiarity with network and application protocols (TCP/IP, HTTP/S, DNS, etc.) and how they impact data protection. Experience with automation tools such as PowerShell, Terraform, Ansible, or equivalent is preferred. Excellent analytical, communication, and collaboration skills. Results-oriented, self-motivated, and capable of working in a fast-paced environment.
Qualifications
Minimum 5 years of experience in a Security Engineering role, with at least 3+ years focused on DLP, data classification, and data security technologies. Direct experience with data labeling and classification projects, ideally with AI/ML-driven automation. Working knowledge of security frameworks (NIST, ISO 27001, CIS, OWASP). Bachelor’s or Master’s degree in Information Systems, Information Security, or related field (preferred but not required). Industry-recognized certifications (CISSP, CISA, CISM, CCSP, or Security+) are strongly preferred.
Where we’re going
UKG is on the cusp of something truly special. Worldwide, we already hold the #1 market share position for workforce management and the #2 position for human capital management. Tens of millions of frontline workers start and end their days with our software, with billions of shifts managed annually through UKG solutions today. Yet it’s our AI-powered product portfolio designed to support customers of all sizes, industries, and geographies that will propel us into an even brighter tomorrow!
Equal Opportunity Employer
UKG is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, disability, religion, sex, age, national origin, veteran status, genetic information, and other legally protected categories.
View The EEO Know Your Rights poster
UKG participates in E-Verify. View the E-Verify posters here .
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Disability Accommodation in the Application and Interview Process
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com .
The pay range for this position is $99,800.00 to $143,450.00 USD, however, base pay offered may vary depending on skills, experience, job-related knowledge and location. This position is also eligible for a short-term incentive and a long-term incentive as part of total compensation. Information about UKG’s comprehensive benefits can be reviewed on our careers site at https://www.ukg.com/careers Seniority level
Seniority level Not Applicable Employment type
Employment type Full-time Job function
Job function Information Technology Industries Computer Hardware Manufacturing, Software Development, and IT Services and IT Consulting Referrals increase your chances of interviewing at UKG by 2x Get notified about new Senior Security Engineer jobs in
San Francisco, CA . Senior Security Engineer (Presales) - Northwest region (San Francisco, CA)
Sr Staff, InfoSec Engineer - Security Architecture
San Francisco, CA $174,400.00-$231,200.00 3 months ago San Francisco, CA $189,823.00-$227,787.00 2 months ago Senior Product Engineer - Security and Compliance
San Francisco, CA $159,000.00-$278,250.00 2 days ago Solution Architect, Security Access Service Edge (West)
Sr Staff, Infosec Engineer - Selling Channel Security
San Francisco, CA $174,400.00-$231,200.00 3 months ago San Francisco, CA $150,000.00-$250,000.00 7 months ago San Francisco, CA $187,000.00-$227,000.00 1 month ago Security Engineer, Detection and Response
San Francisco, CA $255,000.00-$405,000.00 22 hours ago San Francisco, CA $100,000.00-$160,000.00 1 month ago Senior Security Engineer, Infrastructure
San Francisco, CA $200,000.00-$350,000.00 23 hours ago San Bruno, CA $174,000.00-$247,000.00 1 month ago Senior Infrastructure & Security Engineer
Staff Security Engineer (Identity & Access Governance)
San Francisco, CA $211,500.00-$334,600.00 2 weeks ago San Mateo, CA $145,000.00-$150,000.00 2 months ago Senior Security Engineer, Detection & Response
San Francisco, CA $200,000.00-$350,000.00 1 day ago San Francisco, CA $175,000.00-$250,000.00 2 months ago San Francisco, CA $225,000.00-$550,000.00 22 hours ago Senior Security Engineer - Corporate Security
San Francisco, CA $325,000.00-$495,000.00 21 hours ago San Francisco, CA $185,000.00-$265,000.00 6 months ago We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr