DLP Engineer
Core
Design, implement, and manage enterprise data loss prevention (DLP) strategies and solutions to protect sensitive data across endpoints, networks, email, web, and cloud channels, including extending controls to GenAI tools.
Role type
Senior DLP Engineer
Builds
Enterprise DLP policies, sensitivity labels, automated workflows, and GenAI data governance controls
Domain
Information Security / Data Protection
Required skills
Enterprise DLP platforms (Microsoft Purview, Symantec, Forcepoint, Trellix, Netskope, Zscaler), Microsoft Purview Information Protection (sensitivity labels, auto-labeling), workflow automation (Power Automate, Azure Logic Apps), KQL query writing, PowerShell/Python scripting, SIEM integration (Splunk, Microsoft Sentinel), data discovery and classification
Preferred skills
Experience with GenAI data governance (Copilot, Claude), insider threat monitoring, regulatory compliance (GDPR, HIPAA, PCI-DSS, SOX)
Technologies
Microsoft Purview, Symantec DLP, Forcepoint, Trellix, Netskope, Zscaler, Power Automate, Azure Logic Apps, KQL, PowerShell, Python, Splunk, Microsoft Sentinel, ServiceNow, Jira
Responsibilities
Design and configure DLP policies and detection logic; manage sensitivity labels and auto-labeling; build automated workflows for alert routing and remediation; extend DLP coverage to AI/GenAI channels; perform rule tuning and policy optimization; manage DLP platform infrastructure; investigate DLP incidents and coordinate with SOC/IR teams; develop metrics and dashboards; partner with legal and compliance teams to translate regulations into technical controls
Seniority
Mid-Senior, hands-on IC