Senior Information Protection & AI Security Engineer

Senior Information Protection & AI Security Engineer
Job Type: Permanent Full-Time
Job Category: Cybersecurity
Locations: Lafayette, LA | Knoxville, TN | Columbia, SC | Birmingham, AL

Position Overview
We are seeking a Senior Information Protection & AI Security Engineer to support enterprise data protection, AI governance, and insider risk initiatives within a highly regulated financial services environment.
This role will focus on implementing, configuring, and continuously improving Microsoft Purview capabilities, AI security guardrails, and insider threat detection controls.
The engineer will work extensively with Microsoft Purview Information Protection, Data Loss Prevention (DLP), Insider Risk Management, Communication Compliance, data classification, and sensitivity labeling.
The position will also support the implementation of security and governance controls for Microsoft Copilot and other Generative AI platforms, helping prevent sensitive data exposure, oversharing, prompt-based attacks, unauthorized AI usage, and other GenAI-related security risks.
Key Responsibilities

• Implement, configure, and enhance Microsoft Purview Information Protection capabilities.
• Develop and tune Data Loss Prevention (DLP) policies and controls.
• Configure and manage Insider Risk Management and Communication Compliance capabilities.
• Implement enterprise data classification and sensitivity labeling standards.
• Develop and improve insider threat and data exfiltration detection policies.
• Tune security policies to improve detection accuracy and reduce false positives.
• Implement security and governance controls for Microsoft Copilot and other Generative AI platforms.
• Establish safeguards against sensitive data leakage, oversharing, unauthorized AI usage, and prompt injection attacks.
• Support enterprise AI security and governance frameworks.
• Develop security and operational automation using PowerShell, Microsoft Graph API, KQL, and related technologies.
• Support monitoring and detection capabilities using Microsoft Sentinel and the broader Microsoft security ecosystem.
• Develop security dashboards, metrics, reporting, standards, procedures, and operational runbooks.
• Partner with Security Operations, Incident Response, Compliance, Technology, Engineering, and business teams to strengthen information protection and insider threat controls.
• Support the secure adoption of enterprise AI technologies while maintaining regulatory and information protection requirements.

• 8+ years of experience in cybersecurity, information protection, data security, or enterprise security engineering.
• 5+ years of hands-on Microsoft Purview experience.
• Strong hands-on experience configuring and tuning Microsoft Purview, including:
  • Information Protection
  • Data Loss Prevention (DLP)
  • Insider Risk Management
  • Communication Compliance
  • Data Classification
  • Sensitivity Labels
• Experience implementing AI security and governance controls for enterprise Generative AI platforms, including Microsoft Copilot.
• Strong understanding of Generative AI security risks, including:
  • Sensitive data leakage
  • Data oversharing
  • Unauthorized AI usage
  • Prompt injection
• Experience developing and tuning insider threat and data exfiltration detection policies.
• Strong understanding of the Microsoft 365 Security and Compliance ecosystem.
• Hands-on experience with:
  • Microsoft Defender
  • Microsoft Sentinel
  • Microsoft Entra ID
  • Microsoft Azure
  • Microsoft Graph API
• Experience developing security and operational automation using:
  • PowerShell
  • Microsoft Graph API
  • KQL
• Experience creating security dashboards, metrics, reporting, standards, procedures, and operational runbooks.
• Strong understanding of:
  • Information Governance
  • Data Classification
  • Data Protection
  • Security Controls
  • Regulatory Compliance
• Experience collaborating with Security Operations, Incident Response, Compliance, Engineering, and business teams.

• Experience within financial services, banking, regulated industries, or highly sensitive enterprise environments.
• Experience securing enterprise Microsoft Copilot and Generative AI implementations.
• Relevant security certifications such as:
  • Microsoft SC-400
  • Microsoft SC-100
  • Microsoft SC-200
  • Microsoft SC-300
  • CISSP
  • CISM
  • GIAC
  • Comparable cybersecurity certifications