What are the responsibilities and job description for the Security Engineer II - Data Protection position at NC SECU?
If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!
Position Overview:
In this role, you'll help protect member and organizational data across our environment -triaging alerts, tuning policies, metrics creation, provide operational support and turning day-to-day findings into clear reporting our leadership can act on. You'll work closely with the VP of Data Protection and partner teams across Security to keep our data loss prevention program sharp and responsive.
Essential Responsibilities:
- Monitor, triage, and investigate DLP and data protection alerts across Splunk, Proofpoint, Zscaler, and other security tools
- Lead incident response for confirmed data loss events, from initial detection through resolution and documentation
- Provide operational support for DLP tools and assist in maintaining BAU activities.
- Support, tune, and maintain DLP policies to reduce false positives while catching real risk
- Analyze alert trends and incident data to spot patterns and recommend policy or control improvements
- Develop and maintain metrics and reporting that give leadership a clear view of program health
- Document investigation findings, policy changes, and standard operating procedures
- Partner with Security, IT, HR, Privacy and business units to understand data flows and close protection gaps
- Support audits and regulatory requests with accurate, well-organized data protection records
Required Education & Experience (Knowledge, Skills, & Abilities):
- High School Degree required
- 3-5 years of experience in security operations, data protection, or DLP-focused role
- Hands-on experience with DLP, DSPM, data classification or endpoint detection tools (Proofpoint, Zscaler, or Splunk a strong plus)
- Solid understanding of incident response fundamentals - triage, investigation, containment, documentation
- Comfort digging into logs and alert data to find the story behind the noise
- Clear written communication - you can turn technical findings into reporting non-technical stakeholders understand
- A collaborative, detail-oriented approach and genuine curiosity about how data moves and where it's at risk
Preferred Education & Experience (Knowledge, Skills, & Abilities):
- Associates, Bachelors, or advanced degree in IT Security or related field
- Experience in financial services or another highly regulated industry
- Security certifications such as Security , GIAC, or CISSP
- Familiarity with building dashboards or metrics reporting for security programs
Job Environment & Physical Requirements:
- Hybrid - some in office required
SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.
Disclaimer
State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.