Join our dynamic engineering team at Goldman Sachs as a Security Engineering expert (L2). You will play a crucial role in designing, implementing, and refining Data Loss Prevention (DLP) strategies. This position involves extensive collaboration with cross-functional teams to translate complex business and regulatory needs into effective technical security controls.

We are seeking individuals with a strong technical aptitude and a passion for innovation, who are eager to contribute to solving some of the most challenging engineering problems in finance. This is an opportunity to be at the forefront of technological advancement in a fast-paced global environment.

Key responsibilities include the design and continuous optimization of DLP detection capabilities across leading platforms such as Microsoft Purview, Zscaler, and Proofpoint to enhance accuracy and minimize operational impact.

You will develop custom detection logic and integrations for internal systems, conduct regular testing of DLP controls to identify vulnerabilities, and engineer automated workflows to streamline analyst tasks and triage efficiency.

This role also involves serving as the primary technical escalation point for complex data leakage incidents and collaborating closely with data owners, legal, and compliance teams to ensure technical enforcement aligns with business and regulatory requirements. Additionally, you will evaluate and integrate new DLP tools and participate in proof-of-concept trials.

Required technical expertise includes a proven track record in DLP and Security Operations, with hands-on administrative experience in tools like Microsoft Purview, Zscaler, ServiceNow, and Proofpoint. Strong proficiency in automation and scripting using Python or PowerShell, including interaction with REST APIs, is essential.

Candidates must possess strong detection engineering skills, including proficiency with regular expressions, exact data matching, indexed document matching, and custom dictionary creation. A solid understanding of enterprise network routing, proxies, cloud access, and mail transport rules is also necessary.

What truly sets candidates apart is experience integrating DLP tooling with SOAR platforms, a background in software engineering or DevSecOps with CI/CD knowledge, and a proactive problem-solving approach using code. Familiarity with applied AI/ML in detection engineering and experience with agentic workflow automation using LLMs is highly valued.