Data Loss Prevention Engineer (Exp 2-4 years)

Job

Data Loss Prevention (DLP) Analyst

Minimum Year(s) of Experience:

• 2 to 4 years of relevant experience for experienced associate in

  data Loss Prevention (DLP) or Information Security roles.

Certification(s)

• CompTIA Security+ or Microsoft SC-400 (Information Protection Administrator)

Key Responsibilities:

DLP Administration & Operations

• Manage and maintain enterprise DLP solutions (Microsoft Purview / Varonis / Proofpoint / McAfee).
• Create, configure, and fine-tune DLP policies, rules, and classifiers to detect and prevent data leakage across endpoints, emails, and cloud applications.
• Monitor and analyze DLP incidents, alerts, and reports to identify patterns of potential data exfiltration.
• Collaborate with security and business teams to remediate and close incidents effectively.
• Conduct regular policy testing and validation to ensure DLP rules are functioning as intended.

Data Security & Risk Management

• Identify and protect sensitive data such as PII, PHI, PCI, and other regulated information.
• Implement DLP controls for data-in-motion, data-at-rest, and data-in-use across various channels (email, endpoint, network, and cloud).
• Work closely with compliance, privacy, and legal teams to align DLP policies with data governance frameworks.
• Support data classification initiatives and ensure integration between DLP and data discovery tools.
• Provide recommendations for data handling best practices and minimize insider threat risks.

Incident Response & Investigation

• Respond to DLP alerts and conduct

  forensic investigations

  to determine root cause and scope of incidents.
• Coordinate with SOC and Incident Response teams for escalation and reporting of confirmed incidents.
• Document and report findings, remediation actions, and lessons learned for continuous improvement.

Governance, Reporting & Continuous Improvement

• Maintain

  metrics, dashboards, and reports

  on DLP performance, policy violations, and resolution timelines.
• Conduct periodic reviews to optimize DLP configurations and improve detection accuracy while reducing false positives.
• Stay up to date with

  emerging data protection technologies

  and regulatory trends.
• Support

  audits and compliance assessments

  related to data protection and privacy.

Education and Experience:

• Bachelors degree in computer science, Information Security, or a related field (or equivalent experience).
• Hands-on experience with at least one DLP platform:
• Microsoft Purview (M365 Compliance Center / Endpoint DLP)
• Varonis Data Security Platform
• Proofpoint Information Protection / Email DLP
• McAfee Total Protection for DLP
• Strong understanding of data security principles, data classification, and regulatory compliance (GDPR, HIPAA, PCI-DSS).
• Experience in incident management, root cause analysis, and reporting of DLP events.
• Good analytical and problem-solving skills with strong attention to detail.
• Excellent written and verbal communication skills for engaging with cross-functional teams.
• Experience integrating DLP tools with

  SIEM, CASB, or UEBA solutions

  (e.g., Splunk, Azure Sentinel).