Data Security Engineer
Data Security Engineer at Audax Group, an alternative investment manager, owning Microsoft Purview day to day: building data classification and sensitivity labels, tuning DLP, running insider risk reviews, and managing retention and eDiscovery. Hands-on with Microsoft 365, PowerShell, and Graph API; hybrid role based in Boston, MA (4 days in-office).
- Compensation
- $140K–$165K / yr
- Location
- Boston, MA
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in computer science, Information Technology, or equivalent practical experience
- 5+ years of experience in Microsoft 365 security, compliance, or information governance
- 3+ years of hands-on experience with Microsoft Purview
- Hands-on administration of Purview DLP, sensitivity labels, retention, and custom classifiers in a production Microsoft 365 tenant
- Experience running Purview eDiscovery, Content Search, Purview Audit to investigate user and data activity
- PowerShell scripting and working use of the Microsoft Graph API for Purview policy and reporting automation
- Working knowledge of Microsoft Entra ID (formerly Azure Active Directory) and Exchange Online
- SharePoint Online and Teams security configuration
- Working knowledge of control frameworks such as SOC 2, NIST CSF, ISO 27001, and privacy regimes such as GDPR and CCPA
- Experience operating in a regulated or financial services environment
- Strong documentation and stakeholder communication skills
- Ability to collaborate across Legal, Compliance, IT, and business unit leadership, with strong interpersonal skills
- Ability to handle sensitive information, including MNPI, LP data, and personnel records, with strict confidentiality and discretion
Nice to have
- CISM, SC-401 Information Security Administrator, or comparable security certification
- Experience in private equity, investment management, or another regulated financial services environment, including MNPI handling and Regulation S-P expectations
- Insider Risk Management administration and Endpoint DLP deployment in a production tenant
Full description
Founded in 1999, Audax Group is a leading alternative investment manager with offices in Boston, New York, San Francisco, London and Hong Kong. With approximately $42 billion of assets under management and more than 475 employees, Audax is a leading capital partner for middle market companies, operating through three business lines: Audax Private Equity, Audax Private Debt, and Audax Strategic Capital.
For more information, visit or follow Audax Group on LinkedIn.
POSITION SUMMARY:
The Microsoft Purview Data Security Engineer administers Microsoft Purview across the firm and is the hands-on owner of how the platform runs day to day, spanning data classification and sensitivity labeling, data loss prevention, insider risk, and records retention. The engineer translates data protection requirements set by Cybersecurity, Compliance, and Legal into working Purview policy, then tunes it, investigates what it detects, and keeps it accurate as the firm's data and workflows change. The role reports to the Head of Cybersecurity and partners daily with Legal, Compliance, HR, IT, and business unit leadership.
RESPONSIBILITIES:
- Information Protection and Data Classification
- Build, test, and maintain custom sensitive information types, trainable classifiers, document fingerprints, and exact data match classifiers for firm specific content.
- Administer sensitivity labels and label policies, including auto labeling, client side labeling, and label driven encryption, across SharePoint, Teams, Exchange, and OneDrive.
- Diagnose labeling failures and misclassification, identify files that did not receive an intended label, and remediate the cause.
- Validate classifier and label accuracy through structured spot checking with data owners, and tune detection logic on the results.
- Apply sensitivity classification across firm content using sensitive information types, trainable classifiers, document fingerprints, exact data match, and SharePoint document metadata and managed properties.
- Data Loss Prevention
- Tune and extend DLP policies across Exchange, SharePoint, OneDrive, Teams, endpoint, and browser surfaces, and build new policies where coverage gaps are identified.
- Maintain a DLP scenario register mapping each business risk to a trigger, policy, and enforcement mode, and move policies from audit only through notification to enforcement.
- Monitor exfiltration channels across Microsoft 365, SaaS applications, and unsanctioned generative AI tools, using Purview alongside the firm’s cloud access and endpoint tooling.
- Triage DLP incidents, reduce false alerting using policy telemetry, manage allowlists and exceptions so legitimate work is not blocked, and act as first point of contact when a policy affects a user.