Citizens Financial Group
Principal Security Engineer - AI Data & Browser Protection
Lead the architecture and security of enterprise browser data protection, designing DLP controls and integrating with identity, endpoint, and zero-trust tools in a large regulated environment.
- Compensation
- $150K–$190K / yr
- Location
- United States
- Work setup
- Not specified
- Seniority
- Principal
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Full description
Principal Engineer, Enterprise Browser Data Protection & Support
Principal Engineer
Enterprise Browser Data Protection & Support
Position Summary
Serve as the senior technical authority for the architecture, engineering, security, and operational support of enterprise browser and browser-based data protection capabilities. Lead platform strategy, complex troubleshooting, policy design, integrations, automation, and continuous improvement across a large, regulated enterprise environment.
Key Responsibilities
- Own the enterprise browser security architecture, roadmap, standards, and lifecycle.
- Design and implement browser-based data loss prevention controls, including download, upload, clipboard, print, screen capture, watermarking, and session restrictions.
- Integrate browser platforms with identity, endpoint management, DLP, SIEM/SOAR, secure web gateway, CASB, SASE, and zero trust technologies.
- Provide Tier 3/Tier 4 support, lead major incident response, perform root-cause analysis, and develop operational runbooks.
- Automate deployment, policy management, monitoring, reporting, and platform health checks.
- Partner with Cybersecurity, IAM, Endpoint, Network, Cloud, Risk, Compliance, and vendor teams; mentor engineers and influence enterprise design decisions.
Required Experience
- 8+ years in cybersecurity, infrastructure, endpoint, or platform engineering.
- 5+ years designing and supporting enterprise security technologies.
- 2+ years with enterprise browsers, browser isolation, secure web access, or browser-based DLP.
- Demonstrated experience leading architecture and engineering initiatives in large, complex environments; regulated-industry experience preferred.
Required Toolset
- Enterprise browsers/security: Island, Palo Alto Prisma Browser, Chrome Enterprise Premium, Microsoft Edge for Business, Menlo Security, or equivalent.
- Data protection: Microsoft Purview DLP, Netskope DLP, Symantec DLP, Forcepoint DLP, Digital Guardian, or equivalent.
- Endpoint/identity: Microsoft Intune, MECM/SCCM, Tanium, Jamf, Entra ID, Active Directory, Okta, CyberArk, or Ping Identity.
- Security/monitoring: Microsoft Defender XDR, CrowdStrike, Splunk, Microsoft Sentinel, Zscaler, Palo Alto, Netskope, or Cisco Secure Access.
- Automation/development: PowerShell, Python, REST APIs, Microsoft Graph, Git, Azure DevOps or GitHub; Terraform preferred.