Why Pretium Enterprise Services
With expert business service capabilities, Pretium Enterprise Services (“PES”), is integral to the growth, innovation, and transformation of its global operating companies. Partnering with internal and external businesses and stakeholders to rapidly unlock value for its customers, PES delivers with excellence and ownership, enabling scalable growth.
Job Overview
Pretium Enterprise Services is seeking a Data Security Engineer to implement, operate and improve controls that protect sensitive information across Microsoft 365, SaaS applications and cloud data platforms. This hands-on individual contributor role has no direct reports. You will deliver projects focused on sensitive-data discovery and classification, data loss prevention (DLP), information protection and exposure remediation. Working with data owners, application owners and security specialists, you will translate approved requirements into tested controls, resolve operational issues and measure effectiveness while balancing protection with business usability.
This role is hybrid three days a week in our office located in Scottsdale, Arizona (preferred location). Other locations that will considered: Dallas, Texas; Charlotte, North Carolina and California.
What You Will Do
- Configure and maintain connectors and scans for prioritized structured and unstructured data sources. Validate discovery coverage, classification accuracy and scan health, and resolve gaps with platform owners.
- Implement and troubleshoot sensitivity labels and information-protection policies, including approved encryption and usage restrictions. Test policy behavior and usability before broader deployment.
- Work with data and application owners to remediate excessive access to sensitive information, inherited permissions and inappropriate external sharing. Coordinate required access changes with IAM teams and verify that exposures are resolved.
- Integrate data-security alerts and relevant audit events with security monitoring and case-management workflows. Partner with security operations to triage suspected data leakage, assess affected information, preserve evidence and implement approved containment actions.
- Assess SaaS and data-platform security configurations, including external sharing, application permissions, connected services and audit logging. Implement approved changes with application owners and validate their effectiveness.
- Translate discovery and exposure findings into prioritized remediation with data owners. Consider information sensitivity, business use and access paths; track corrective actions through validation and closure.
- Engineer and tune DLP policies for prioritized email, collaboration and endpoint use cases. Test detection and enforcement with representative scenarios, investigate missed detections and false positives, and use staged rollouts with documented exceptions and rollback procedures.
- Implement assigned technical controls for retention and data minimization under requirements approved by Legal, Compliance and data owners. Validate changes with application owners; enterprise retention policy and records management remain with the designated business functions.
- Build maintainable scripts and API integrations for data-exposure analysis, discovery coverage checks, evidence collection and control validation. Include testing, error handling and secure credential management.
- Partner with automation engineers on monitoring and repeatable workflows, cloud engineers on data-platform controls, and AI security engineers on data access through AI integrations.
- Operate assigned data-security services and maintain runbooks, configuration records and support procedures. Report on discovery coverage, policy effectiveness, unresolved exposures and exception aging; use findings to prioritize control improvements.
Who We Are Looking For
- Experience independently implementing and troubleshooting production data-security controls. Able to deliver defined projects, validate results and escalate architectural decisions appropriately.
- Bachelor's Degree in Computer Science, Cybersecurity, Information Security, Computer Engineering, Software Engineering, or Information Technology
- Hands-on Microsoft 365 data-protection experience, including Microsoft Purview DLP, sensitivity labels and information-protection policies, or comparable experience with equivalent enterprise data-security platforms.
- Practical experience onboarding data sources for discovery and classification, configuring scans, validating findings and identifying gaps in coverage.
- Experience taking DLP or information-protection policies from requirements through testing, staged deployment and production support. Able to investigate policy behavior, tune detection accuracy, manage exceptions and explain business impact.
- Ability to investigate effective access, excessive permissions and external sharing in SaaS applications or data platforms, and work with application owners to implement remediation.
- Working knowledge of data-protection principles, including encryption at rest and in transit, least-privilege data access, retention and data minimization, with the ability to troubleshoot control gaps.
- Ability to use PowerShell or Python and REST APIs to automate data-security checks, reporting and remediation workflows. Familiarity with version control, testing, error handling and secure handling of credentials and sensitive data.
- Strong troubleshooting, documentation and collaboration skills. Able to explain findings, agree remediation actions and manage assigned work across multiple teams.
Preferred Qualifications
Experience with data security posture management (DSPM), cloud data stores, endpoint DLP, or data-security alert integration with security monitoring platforms is valued. Experience assessing sensitive-data exposure through AI integrations or implementing technical retention controls is also welcome. Experience supporting multiple business units or tenants and relevant data-security certifications are helpful. Expertise in every platform is not required.
What We Offer
This position offers the opportunity to join a collegial, entrepreneurial firm committed to the personal and professional growth of its team members and to maintaining a positive, encouraging work environment where people enjoy working together. The company offers a comprehensive benefits and perks package, including:
- 401(k) plan with an employer match
- Health, dental, vision and life insurance
- Paid Time Off (PTO)
- 11 firm holidays
- Hybrid office/work from home arrangement
- Annual year-end bonus eligible
Pretium Enterprise Services is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment regardless of race, color, religion, gender, gender identity or expression, genetic information, marital status, sexual orientation, national origin, disability, age, veteran status, or any other characteristic protected by federal, state, or local law.
