Senior Data Security Engineer (USSOCOM-Zero Trust, Azure Security & DLP) at Kentro
Tampa, FL
—
Jul 1, 2026
Tampa, FL
Jul 21, 2026
What this job asks for AI summary
A senior-level engineering role focused on data security within a hybrid classified environment supporting a U.S. military command. Day-to-day work centers on architecting and operating data loss prevention, rights management, and security monitoring tools — primarily Microsoft Purview, Defender XDR, and Trellix DLP — across cloud and on-premises networks spanning multiple classification levels. Suits an experienced cybersecurity engineer with deep Microsoft Azure security expertise and a TS/SCI clearance.
Senior level · 10+ years · Tampa-St. Petersburg-Clearwater, FL · Master's required · TS/SCI clearance · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $121,586 (middle half $89,036–$154,361).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The JD hard-requires a Master's degree in Computer Science, Cybersecurity, IT, or a related technical discipline — no 'or equivalent experience' language is present.
The DoD 8570/8140 IAT Level III certification requirement is a hard gate; CISSP is listed first with CASP+, CCSP, and CISM as acceptable alternatives — any one of the four satisfies the requirement.
KQL, Microsoft Sentinel, and Splunk appear under an explicitly labeled 'Preferred Technical Skills (A-Plus)' section and are therefore preferred, not required.
The role is hybrid in Tampa, FL, supporting a classified DoD program (USSOCOM EDAT Zero Trust); TS/SCI clearance is a hard gate.
Storage protocols (NFS, SMB/CIFS, S3) and database types (SQL, NoSQL) are listed under required Technical Skills as knowledge areas for troubleshooting security scanning access — treated as hard gates per their placement in the qualifications section.
No compensation figures are provided in the posting.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Microsoft Defender for Cloud Apps.
Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.