This job has closed.

Encode, Inc. · 6 days ago

Data Security Remediation Engineer

United States

Full-time

Remote

Entry, Mid Level

2+ years exp

Encode, Inc. is focused on a comprehensive data security transformation initiative. The Data Security Remediation Engineer will be responsible for deploying and integrating tools to secure the client's Microsoft 365 ecosystem, particularly SharePoint and OneDrive, while managing the execution of data security strategies and ensuring compliance.

AppsMobile AppsSoftware

Growth Opportunities

Responsibilities

Perform hands-on configuration of BigID scanners and Microsoft Purview policies; tune classification logic, sensitivity labels, and DLP rules to ensure high-fidelity detection with minimal false positives

Execute the technical workflows to apply sensitivity labels, enforce blocking/encryption actions, and relocate stale or high-risk files (ROT) to secure repositories

Diagnose and resolve technical issues related to API connectivity, scan failures, or label mismatches; work directly with vendor support tickets to resolve product bugs or limitations

Develop PowerShell scripts to automate bulk remediation tasks or reporting; maintain detailed technical "runbooks" and configuration documentation for all implemented controls

Qualification

BigIDMicrosoft PurviewPowerShellData Loss PreventionSensitivity LabelsData SecurityOperational TroubleshootingAnalytical SkillsCertificationsTeam CollaborationCommunication SkillsTechnical Documentation

Required

Bachelor's degree in computer science, Information Technology, or a relevant technical field + a minimum of 2–3 years of hands-on experience in data security, system administration, or network engineering

Hands-on experience deploying and configuring BigID scanners for unstructured data sources. Proficient in troubleshooting connectivity issues, configuring 'Hyperscan' performance tuning, and building custom classifiers using RegEx or NLP training sets

Demonstrated ability to implement data protection controls within the M365 Compliance center. Must be capable of creating Sensitivity Labels, configuring auto-labeling policies for SharePoint/OneDrive, and testing DLP rule behavior (e.g., blocking external sharing) in a live environment

Proficiency in PowerShell is essential. The candidate needs to be able to write scripts to interact with the Microsoft Graph API or BigID API for bulk tasks, such as generating reports on labeled files or automating the relocation of 'stale' data to archive folders

Strong analytical skills to diagnose integration breaks between BigID and Purview (e.g., labels not applying, scan failures). Ability to read audit logs and work with vendor support tickets to resolve technical blockers

Excellent written and verbal communication skills are required for documenting configuration changes ('Runbooks') and effectively communicating technical progress or blockers to the Remediation Lead and project stakeholders

Must have one of the following: Security + CE, CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, CND, CASP CE, CISSP, CSSLP

Preferred

5+ years of experience

BigID Certification: Active Certified BigID Security Professional is highly preferred (specifically covers Remediation & Labeling apps). Alternatively: Completion of the BigID Privacy, Security & Data Governance track

Microsoft Compliance Certification: Active Microsoft Certified: Information Protection Administrator Associate (SC-400) is strongly desired

CISSP

Understanding and experience with NIST Special Publication [SP] 800-171

Familiarity and understanding of United States Executive Order [EO] 14117