Data Loss Prevention Engineer

Job description

- Daily Rule Management: Configure, tune, and optimize DLP engines, including custom dictionaries and Exact Data Match (EDM). - Exception Handling: Review and manage DLP exception requests, ensuring they are valid, documented, and time-bound. - Access & Control: Ensure correct - L1 User Support: Act as the primary point of contact for end-users regarding policy triggers and blocks. - Hypercare Management: Lead the Hypercare phase for new policy rollouts, providing high-touch support to departments to minimize business disruption during deployment. - Education: Translate technical security blocks into understandable guidance to improve data handling habits. - Issue Prioritization: Categorize and prioritize technical issues reported to the implementation partner, ensuring critical blockers are addressed first. - SLA Oversight: Monitor the implementation partner's progress against project milestones and technical deliverables. - Critical Issue Flagging: Monitor system health and policy logs to identify and escalate critical security risks or technical gaps to senior leadership. - Reporting: Create and share weekly insights on high-risk data movement patterns and policy effectiveness. - Risk Mitigation: Proactively identify potential data exfiltration vectors and recommend configuration changes to close security gaps. - Platform Integration: Manage the integration of DLP tools with the broader security stack, including SIEM, SOAR, and Endpoint Protection (EDR) platforms. - Infrastructure Support: Assist with the configuration of PAC files, traffic forwarding, and identity provider (IdP) integrations. - Documentation: Maintain comprehensive runbooks and Standard Operating Procedures (SOPs) for all DLP-related workflows. Required Qualifications - Experience: 3 to 7 years in Information Security, with a heavy focus on Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) tools. - Technical Proficiency: Strong understanding of SSL inspection, network traffic steering, and Regex (Regular Expressions) for custom policy creation. - Compliance Knowledge: Familiarity with global data privacy regulations such as GDPR, HIPAA, or PCI-DSS. - Communication: Ability to balance strict security enforcement with a customer-service mindset during user interactions. - Problem Solving: Proven track record of managing technical issues with third-party vendors and implementation partners.