Company Overview With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on. At UKG, you get more than just a job. You get to work with purpose. Our team of U Krewers are on a mission to inspire every organization to become a great place to work through our award-winning HR technology built for all. Here, we know that you’re more than your work. That’s why our benefits help you thrive personally and professionally, from wellness programs and tuition reimbursement to U Choose — a customizable expense reimbursement program that can be used for more than 200+ needs that best suit you and your family, from student loan repayment, to childcare, to pet insurance. Our inclusive culture, active and engaged employee resource groups, and caring leaders value every voice and support you in doing the best work of your career. If you’re passionate about our purpose — people —then we can’t wait to support whatever gives you purpose. We’re united by purpose, inspired by you. At UKG, security is at the core of everything we do. We are seeking a Security Engineer with a focus on Data Loss Prevention (DLP) to join our team. This individual will design, implement, and maintain security solutions and controls that safeguard sensitive data across the enterprise. The role requires expertise in DLP technologies, cloud access security, and zero-trust principles, with a strong ability to integrate these into enterprise-wide security strategies.    Job responsibilities:  <ul> <li>Review, test, and implement security solutions related to: </li> <li>Data Loss Prevention (DLP): Microsoft Purview Information Protection, Conditional Access, policy configuration, monitoring, and incident response. </li> <li>Data Classification &amp; Labeling: Define, implement, and maintain enterprise-wide data classification and labeling standards; leverage AI/ML-driven solutions to automatically classify and tag sensitive information. </li> <li>CASB Solutions: Manage inline (proxy-based) and out-of-band (API-based) CASB models to control access to and usage of SaaS applications. </li> <li>ZTNA Solutions: Integration and operation of Zero Trust Network Access solutions (e.g., Zscaler, Prisma Access, Axis) with DLP enforcement. </li> <li>Email Security: Integrate DLP and data classification policies with enterprise email security platforms. </li> <li>Public Cloud Security: Apply DLP and CASB controls in AWS, Azure, and GCP environments. </li> <li>Develop, enforce, and continuously improve data protection policies and security baselines. </li> <li>Monitor DLP systems for policy violations, anomalous activity, and potential data exfiltration; investigate incidents and drive remediation. </li> <li>Recommend enhancements to improve visibility and effectiveness of data classification, labeling, and protection capabilities. </li> <li>Maintain documentation of configurations, security policies, and operational procedures. </li> <li>Automate manual security tasks and policy enforcement where possible (infrastructure as code, scripting, orchestration). </li> </ul>   Knowledge, Skills, and Abilities:  <ul> <li>Strong understanding of data security principles, data classification, and labeling frameworks. </li> <li>Hands-on experience with enterprise DLP platforms (Microsoft Purview strongly preferred). </li> <li>Experience with AI-driven data classification solutions and integration into security workflows. </li> <li>Familiarity with CASB deployment models (inline and out-of-band) and their application to SaaS platforms. </li> <li>Knowledge of Zero Trust frameworks and their application to DLP and access controls. </li> <li>Solid understanding of cloud security controls in AWS, Azure, and GCP. </li> <li>Familiarity with network and application protocols (TCP/IP, HTTP/S, DNS, etc.) and how they impact data protection. </li> <li>Experience with automation tools such as PowerShell, Terraform, Ansible, or equivalent is preferred. </li> <li>Excellent analytical, communication, and collaboration skills. </li> <li>Results-oriented, self-motivated, and capable of working in a fast-paced environment. </li> </ul>   Qualifications:  <ul> <li>Minimum 5 years of experience in a Security Engineering role, with at least 3+ years focused on DLP, data classification, and data security technologies. </li> <li>Direct experience with data labeling and classification projects, ideally with AI/ML-driven automation. </li> <li>Working knowledge of security frameworks (NIST, ISO 27001, CIS, OWASP). </li> <li>Bachelor’s or Master’s degree in Information Systems, Information Security, or related field (preferred but not required). </li> <li>Industry-recognized certifications (CISSP, CISA, CISM, CCSP, or Security+) are strongly preferred. </li> </ul>   Where we’re going UKG is on the cusp of something truly special. Worldwide, we already hold the #1 market share position for workforce management and the #2 position for human capital management. Tens of millions of frontline workers start and end their days with our software, with billions of shifts managed annually through UKG solutions today. Yet it’s our AI-powered product portfolio designed to support customers of all sizes, industries, and geographies that will propel us into an even brighter tomorrow!  Equal Opportunity Employer    UKG is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, disability, religion, sex, age, national origin, veteran status, genetic information, and other legally protected categories. View <a href="https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf" target="_blank">The EEO Know Your Rights poster</a>       UKG participates in E-Verify. View the E-Verify posters <a href="https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf" target="_blank">here</a>.   It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.  Disability Accommodation in the Application and Interview Process For individuals with disabilities that need additional assistance at any point in the application and interview process, please email <a href="mailto:UKGCareers@ukg.com" target="_blank">UKGCareers@ukg.com</a>.    The pay range for this position is $99,800.00 to $143,450.00 USD, however, base pay offered may vary depending on skills, experience, job-related knowledge and location. This position is also eligible for a short-term incentive and a long-term incentive as part of total compensation. Information about UKG’s comprehensive benefits can be reviewed on our careers site at <a href="https://www.ukg.com/careers" target="_blank">https://www.ukg.com/careers  </a>