DLP Engineer

Job Summary

Key Responsibilities Insider Risk (IRM) Monitoring: Assist in reviewing anonymized alerts in the Microsoft Purview Insider Risk Management console - help identify patterns like "Data Resignation" (at-risk departing employees) or "Data Leaks" by correlating activity across Teams, SharePoint, and Endpoint. DLP Strategy & Policy: Help manage Data Loss Prevention (DLP) specifically for IRM and Data Protection offering Optimization of "Auto-labeling" policies that automatically encrypt documents containing PII, PHI, or Intellectual Property Alert Correlation: Use the Content Explorer to investigate what was shared and the Activity Explorer to understand how it was shared Create weekly "Risk Snapshots" for leadership, visualizing trends in sensitive data exfiltration attempts. Technical Qualifications Education: Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years of hands on experience Analytical Logic: Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types. Microsoft 365 Core: Comfortable navigating the M365 ecosystem (understanding how a file moves from OneDrive to an external USB or Personal Cloud). Discretion: High level of integrity; this role involves handling highly sensitive information regarding company risk and employee behavior.

Key Responsibilities

Key Responsibilities Insider Risk (IRM) Monitoring: Assist in reviewing anonymized alerts in the Microsoft Purview Insider Risk Management console - help identify patterns like "Data Resignation" (at-risk departing employees) or "Data Leaks" by correlating activity across Teams, SharePoint, and Endpoint. DLP Strategy & Policy: Help manage Data Loss Prevention (DLP) specifically for IRM and Data Protection offering Optimization of "Auto-labeling" policies that automatically encrypt documents containing PII, PHI, or Intellectual Property Alert Correlation: Use the Content Explorer to investigate what was shared and the Activity Explorer to understand how it was shared Create weekly "Risk Snapshots" for leadership, visualizing trends in sensitive data exfiltration attempts. Technical Qualifications Education: Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years of hands on experience Analytical Logic: Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types. Microsoft 365 Core: Comfortable navigating the M365 ecosystem (understanding how a file moves from OneDrive to an external USB or Personal Cloud). Discretion: High level of integrity; this role involves handling highly sensitive information regarding company risk and employee behavior.

Skill Requirements

Key Responsibilities Insider Risk (IRM) Monitoring: Assist in reviewing anonymized alerts in the Microsoft Purview Insider Risk Management console - help identify patterns like "Data Resignation" (at-risk departing employees) or "Data Leaks" by correlating activity across Teams, SharePoint, and Endpoint. DLP Strategy & Policy: Help manage Data Loss Prevention (DLP) specifically for IRM and Data Protection offering Optimization of "Auto-labeling" policies that automatically encrypt documents containing PII, PHI, or Intellectual Property Alert Correlation: Use the Content Explorer to investigate what was shared and the Activity Explorer to understand how it was shared Create weekly "Risk Snapshots" for leadership, visualizing trends in sensitive data exfiltration attempts. Technical Qualifications Education: Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years of hands on experience Analytical Logic: Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types. Microsoft 365 Core: Comfortable navigating the M365 ecosystem (understanding how a file moves from OneDrive to an external USB or Personal Cloud). Discretion: High level of integrity; this role involves handling highly sensitive information regarding company risk and employee behavior.

Must Have Skill

Palo Alto Firewall,Cloud Access Security Broker Tools (CASBs),Zscaler DLP (Data Loss Prevention)

Good to Have Skill

Other Requirements

Key Responsibilities Insider Risk (IRM) Monitoring: Assist in reviewing anonymized alerts in the Microsoft Purview Insider Risk Management console - help identify patterns like "Data Resignation" (at-risk departing employees) or "Data Leaks" by correlating activity across Teams, SharePoint, and Endpoint. DLP Strategy & Policy: Help manage Data Loss Prevention (DLP) specifically for IRM and Data Protection offering Optimization of "Auto-labeling" policies that automatically encrypt documents containing PII, PHI, or Intellectual Property Alert Correlation: Use the Content Explorer to investigate what was shared and the Activity Explorer to understand how it was shared Create weekly "Risk Snapshots" for leadership, visualizing trends in sensitive data exfiltration attempts. Technical Qualifications Education: Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years of hands on experience Analytical Logic: Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types. Microsoft 365 Core: Comfortable navigating the M365 ecosystem (understanding how a file moves from OneDrive to an external USB or Personal Cloud). Discretion: High level of integrity; this role involves handling highly sensitive information regarding company risk and employee behavior.