Data Loss Prevention Engineer

Job description

• Daily Rule Management: Configure, tune, and optimize DLP engines, including custom dictionaries and Exact Data Match (EDM). • Exception Handling: Review and manage DLP exception requests, ensuring they are valid, documented, and time-bound. • Access & Control: Ensure correct • L1 User Support: Act as the primary point of contact for end-users regarding policy triggers and blocks. • Hypercare Management: Lead the Hypercare phase for new policy rollouts, providing high-touch support to departments to minimize business disruption during deployment. • Education: Translate technical security blocks into understandable guidance to improve data handling habits. • Issue Prioritization: Categorize and prioritize technical issues reported to the implementation partner, ensuring critical blockers are addressed first. • SLA Oversight: Monitor the implementation partner's progress against project milestones and technical deliverables. • Critical Issue Flagging: Monitor system health and policy logs to identify and escalate critical security risks or technical gaps to senior leadership. • Reporting: Create and share weekly insights on high-risk data movement patterns and policy effectiveness. • Risk Mitigation: Proactively identify potential data exfiltration vectors and recommend configuration changes to close security gaps. • Platform Integration: Manage the integration of DLP tools with the broader security stack, including SIEM, SOAR, and Endpoint Protection (EDR) platforms. • Infrastructure Support: Assist with the configuration of PAC files, traffic forwarding, and identity provider (IdP) integrations. • Documentation: Maintain comprehensive runbooks and Standard Operating Procedures (SOPs) for all DLP-related workflows. Required Qualifications • Experience: 3 to 7 years in Information Security, with a heavy focus on Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) tools. • Technical Proficiency: Strong understanding of SSL inspection, network traffic steering, and Regex (Regular Expressions) for custom policy creation. • Compliance Knowledge: Familiarity with global data privacy regulations such as GDPR, HIPAA, or PCI-DSS. • Communication: Ability to balance strict security enforcement with a customer-service mindset during user interactions. • Problem Solving: Proven track record of managing technical issues with third-party vendors and implementation partners.