Data Protection and Management Engineer

Dentons US LLP is currently recruiting for a Data Protection and Management Engineer. This role will be responsible to build and operate the technical controls that keep the Firm's client and matter data confidential, correctly classified, and retained only as long as it should be. This is a hands-on engineering role centered on data protection and management technologies.

Data Protection and Management Engineer will own day-to-day operation of data security posture management, data loss prevention, insider risk management, and sensitivity labeling, and will support Records and Information Governance in applying retention and disposition across the same estate. You will work alongside document management system administrators on security policy management, ethical walls, and access controls, and partner with infrastructure, practice support, Risk, and the Office of General Counsel to protect confidential material without slowing the practice of law.

Responsibilities

• Data Posture and Discovery - Operate the Firm's DSPM platform. Onboard and maintain data sources across Microsoft 365, the document management system, file shares, and cloud infrastructure; tune discovery and classification accuracy; and report on sensitive data location, exposure, and entitlement sprawl.
• Remediation of Data Exposure. Partner with infrastructure, application, and practice support teams to remediate overshared repositories, excessive permissions, orphaned accounts, and unmanaged data stores identified through DSPM. Track remediation to closure and measure the reduction in data exposure over time.
• Data Loss Prevention - Author, test, and tune policies across email, endpoint, cloud applications, browser, and removable media; manage exception and business-justification workflows; triage and investigate alerts; and reduce false positives while maintaining coverage of every egress channel.
• Retention and Disposition - Partner with Records and Information Governance to implement the Firm's retention schedule. Configure retention labels and policies, support disposition review and defensible destruction, and ensure legal holds correctly suspend retention where required.
• Data Minimization - Reduce redundant, obsolete, and trivial content as a protection control as much as a storage one. Identify aging and duplicate data, support decommissioning of legacy repositories, and report on volume under management and storage reclaimed.
• Document Management System Controls - Support DMS administrators in the operation of security policy management, ethical walls, and access management. Assist with need-to-know security models, matter-level provisioning, access request workflows, periodic access reviews and recertification, and evidence for client audits and outside counsel guidelines.