Principal Security Engineer -DLP AI Security Automation at Citizens Financial Group

Job description

Principal Security Engineer, DLP AI Automation, Platform Integration Location: Hybrid – 4 days onsite, 1 remote in one of the following hubs: Johnston, RI | Boston, MA | Iselin, NJ | Pittsburgh, PA | Manchester, NH Summary Lead the design, deployment, and expansion of enterprise Data Loss Prevention capabilities with a focus on AI driven automation. Own DLP platform integration and strategy across cloud, endpoint, SaaS, and emerging AI environments, driving scalable, automated data protection that reduces risk and enables secure innovation. Key Responsibilities AI Automation and Intelligent Operations • Deploy and operationalize AI driven DLP automation, including agent based triage, contextual risk assessment, and automated remediation • Leverage AI powered classification, adaptive protection, and insider risk capabilities to build proactive data protection workflows • Design automation pipelines to reduce manual triage, lower false positives, and accelerate incident resolution • Evaluate and integrate emerging AI and ML capabilities to improve DLP effectiveness and operational efficiency DLP Architecture and Deployment • Lead end to end design, deployment, and optimization of DLP controls across CASB, Information Protection, and DSPM platforms • Architect unified DLP policies across endpoints, SaaS, IaaS, email, and network traffic within SSE environments • Define security requirements, architecture patterns, and integration blueprints for enterprise DLP solutions across cloud and hybrid environments Policy Development, Tuning, and Compliance • Develop and enforce DLP policies aligned to regulatory requirements such as GLBA, PCI DSS, SOX, GDPR • Continuously tune rules, classifiers, sensitive information types, and exception workflows to improve detection accuracy • Apply risk frameworks to identify and mitigate data protection gaps • Maintain documentation, runbooks, and audit evidence for compliance reviews Leadership and Collaboration • Serve as the technical lead for DLP AI automation initiatives • Partner across cybersecurity, risk, IT, and business teams to align data protection strategy • Mentor engineers and promote operational excellence and continuous learning • Oversee design, integration, testing, and delivery of data protection solutions • Present program insights and recommendations to senior leadership Required Qualifications • Bachelor’s degree or equivalent experience in Computer Science, Cybersecurity, or related field • 8+ years experience in information security, including 4+ years in DLP, CASB, or cloud data protection engineering • Deep hands on expertise with DLP platforms including policy design, deployment, and operations • Experience integrating DLP and CASB with SIEM, SOAR, identity, and cloud platforms • Proven experience building automation or AI driven workflows for security operations • Strong knowledge of regulatory frameworks such as GLBA, PCI DSS, SOX, FFIEC, GDPR, CCPA • Strong analytical and troubleshooting skills across hybrid environments • Excellent communication skills translating technical concepts for varied audiences Preferred Qualifications • Experience with agent based DLP automation and autonomous remediation capabilities • Familiarity with AI driven security tooling including AI risk and readiness platforms • Experience with additional data protection technologies • Scripting or automation experience such as Python, PowerShell, or KQL • Certifications such as CISSP, CCSP, CISM • Experience in financial services or other regulated industries • Experience with SIEM analytics, dashboards, and DLP telemetry correlation • Cloud security experience across AWS, Azure, or GCP Core Skills • DLP and data protection engineering, advanced, designs and operates enterprise DLP across cloud, endpoint, and network • AI and automation in security, advanced, applies AI driven workflows to enhance detection and response • Cloud security and CASB, advanced, secures SaaS and cloud environments • Compliance and regulatory controls, advanced, aligns DLP strategy with regulatory requirements • Cybersecurity strategy, advanced, connects data protection initiatives to business priorities • Emerging technologies, advanced, evaluates and implements new AI and security capabilities • Systems integration and management, advanced, integrates security platforms across the enterprise • Incident and problem management, advanced, leads investigation and resolution of data security events • Stakeholder engagement and communication, advanced, communicates risk and strategy to leadership • Innovation and continuous improvement, advanced, drives automation and program optimization Why Join Us • Lead cutting edge AI driven data protection initiatives shaping how the organization secures sensitive data • Work in a collaborative, innovation focused environment with strong executive visibility • Directly influence secure adoption of AI and cloud technologies • Competitive compensation, strong benefits, and support for professional growth Pay Transparency The salary range for this position is $175,000 to $250,000 per year, plus an opportunity to earn additional incentive earnings. Actual pay is based on various factors including, but not limited to, the budget, work location, and relevant skills and experience. Benefits Comprehensive benefits include medical, dental, and vision coverage, retirement plans, parental leave, flexible work arrangements, education reimbursement, wellness programs, and generous paid time off exceeding local requirements. Citizens Benefits Overview

Requirements

Must-haves

Principal Security Engineer, DLP AI Automation, Platform Integration
Location: Hybrid – 4 days onsite, 1 remote in one of the following hubs: Johnston, RI | Boston, MA | Iselin, NJ | Pittsburgh, PA | Manchester, NH
AI Automation and Intelligent Operations
Deploy and operationalize AI driven DLP automation, including agent based triage, contextual risk assessment, and automated remediation
Leverage AI powered classification, adaptive protection, and insider risk capabilities to build proactive data protection workflows
Design automation pipelines to reduce manual triage, lower false positives, and accelerate incident resolution
Evaluate and integrate emerging AI and ML capabilities to improve DLP effectiveness and operational efficiency
DLP Architecture and Deployment
Lead end to end design, deployment, and optimization of DLP controls across CASB, Information Protection, and DSPM platforms
Architect unified DLP policies across endpoints, SaaS, IaaS, email, and network traffic within SSE environments
Define security requirements, architecture patterns, and integration blueprints for enterprise DLP solutions across cloud and hybrid environments
Policy Development, Tuning, and Compliance

Nice-to-haves

Experience with agent based DLP automation and autonomous remediation capabilities
Familiarity with AI driven security tooling including AI risk and readiness platforms
Experience with additional data protection technologies
Scripting or automation experience such as Python, PowerShell, or KQL
Certifications such as CISSP, CCSP, CISM
Experience in financial services or other regulated industries
Experience with SIEM analytics, dashboards, and DLP telemetry correlation
Cloud security experience across AWS, Azure, or GCP
DLP and data protection engineering, advanced, designs and operates enterprise DLP across cloud, endpoint, and network
AI and automation in security, advanced, applies AI driven workflows to enhance detection and response
Cloud security and CASB, advanced, secures SaaS and cloud environments
Compliance and regulatory controls, advanced, aligns DLP strategy with regulatory requirements

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aimlpythonawsazuregcp

Platform: oracle-cloud
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

Paid Time Off

Parental Leave

Wellness