Data Loss Prevention Engineer

• Daily Rule Management: Configure, tune, and optimize DLP engines, including custom dictionaries and Exact Data Match (EDM).
• Exception Handling: Review and manage DLP exception requests, ensuring they are valid, documented, and time-bound.
• Access & Control: Ensure correct
• L1 User Support: Act as the primary point of contact for end-users regarding policy triggers and blocks.
• Hypercare Management: Lead the Hypercare phase for new policy rollouts, providing high-touch support to departments to minimize business disruption during deployment.
• Education: Translate technical security blocks into understandable guidance to improve data handling habits.
• Issue Prioritization: Categorize and prioritize technical issues reported to the implementation partner, ensuring critical blockers are addressed first.
• SLA Oversight: Monitor the implementation partner's progress against project milestones and technical deliverables.
• Critical Issue Flagging: Monitor system health and policy logs to identify and escalate critical security risks or technical gaps to senior leadership.
• Reporting: Create and share weekly insights on high-risk data movement patterns and policy effectiveness.
• Risk Mitigation: Proactively identify potential data exfiltration vectors and recommend configuration changes to close security gaps.
• Platform Integration: Manage the integration of DLP tools with the broader security stack, including SIEM, SOAR, and Endpoint Protection (EDR) platforms.
• Infrastructure Support: Assist with the configuration of PAC files, traffic forwarding, and identity provider (IdP) integrations.
• Documentation: Maintain comprehensive runbooks and Standard Operating Procedures (SOPs) for all DLP-related workflows.

Required Qualifications

• Experience: 3 to 7 years in Information Security, with a heavy focus on Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) tools.
• Technical Proficiency: Strong understanding of SSL inspection, network traffic steering, and Regex (Regular Expressions) for custom policy creation.
• Compliance Knowledge: Familiarity with global data privacy regulations such as GDPR, HIPAA, or PCI-DSS.
• Communication: Ability to balance strict security enforcement with a customer-service mindset during user interactions.
• Problem Solving: Proven track record of managing technical issues with third-party vendors and implementation partners.