Principal Engineer, Data Protection

Caesars Entertainment is in search of a visionary and highly motivated Principal Engineer to help implement and mature our Cybersecurity Data Protection program. This critical role will be responsible for executing a comprehensive strategy to identify, classify, and protect data while at rest and in motion. The Principal Engineer will be an expert in data protection and data loss prevention (DLP) strategy and techniques, with a focus on protecting data in a Microsoft M365 ecosystem.  

Responsibilities 

• Data Protection Platform Management – Configure, optimize, and administer our data protection and DLP platform(s).  Ensure data protection platforms are fully integrated with SIEM and other security tools as necessary.  

• Microsoft 365 Security Posture and Controls – Work with M365 platform owners to ensure configuration and controls are optimized to identify or prevent the inappropriate disclosure or transfer of data within the Microsoft ecosystem.  

• Data Discovery and Classification – Implement an efficient design and process for regular scanning to identify and classify data at rest across network shares, SharePoint, Confluence, and other knowledge stores.   

• Data Incidents and Response - Partner with the security operations team to develop and refine correlation rules, alerts, and response processes for data-related events/incidents.   

• Data Protection Control Design – Provide subject matter expertise to help design, implement, and optimize data protection controls. 

• Endpoint Data Controls – Implement and optimize endpoint controls to manage the risk related to printing, USB device transfer, or other usage. 

• Network Data Controls – Partner with the network security team to ensure appropriate controls to manage data risk associated with web browsing, SaaS service consumption, and other scenarios where data is crossing organizational boundaries.  

• Process Improvement - Continuously evaluate and improve the various cyber data protection processes, identifying areas for automation, optimization, and increased efficiency.  Develop and maintain relevant policies, procedures, and standards. 

• Reporting & Metrics - Develop and maintain key performance indicators (KPIs) and metrics to track the effectiveness of the data protection program.  Provide regular reports to senior management on vulnerability trends, remediation progress, and overall security posture.   

• Compliance & Audits: Ensure compliance with relevant security regulations and standards (e.g., PCI DSS, HIPAA, NIST).  Support internal and external audits related to data protection and DLP. 

• Collaboration & Communication - Effectively communicate vulnerability information and remediation recommendations to technical and non-technical audiences.  Collaborate with other security teams, IT operations, and business units. 

 
Qualifications 

• Bachelor's degree in Computer Science, Information Security, or a related field.   

• 10+ years of experience in enterprise technology, with progressively increasing responsibilities. 

• 5+ years of experience implementing and managing data protection, DLP, and related technologies in support of a cybersecurity program. 

• Experience developing and running data protection and DLP functions in an enterprise environment. 

• Deep understanding of encryption, tokenization, masking, and similar data protection techniques. 

• Expert level knowledge of DLP and data protection platforms, including the full product lifecycle from requirement gathering to implementation and continuous optimization.  

• Extensive understanding of Microsoft 365 and how to mitigate data risks in the M365 ecosystem 

• Able to work effectively and efficiently toward detailed goals in a complex environment with fluid priorities. 

• Strong analytical, problem solving and project management skills. 

• Excellent communication, interpersonal, and presentation skills