Data Loss Prevention (DLP) Engineer Location: Remote (10% travel to NY/NJ)
The DLP Engineer will be responsible for utilizing data loss prevention (DLP) solutions to prevent the transmission, or disclosure of sensitive data and ensuring compliance with the NIST Cybersecurity Framework and other applicable regulations.
This position will play a crucial role in identifying and consulting on mitigating data security risks, assisting in the response of breaches, and promoting a culture of data protection across the organization.
This position requires a blend of technical expertise, strategic vision, and a collaborative approach to safeguard the organization's data against loss or misuse.
Responsibilities: Understand the organization's data and information classifications.
Discover and identify intentional and unintentional data loss threats.
Validate the process, technologies, and services handling critical information.
Analyze business requirements and provide recommendations for tuning content detection rules to improve accuracy across multiple DLP systems.
Define, implement, and support process and technology improvements related to preventing unauthorized disclosure, modification, removal, or destruction of information.
Design, deploy, and optimize on-prem DLP solutions and controls, including CASB, Endpoint DLP, and Network DLP.
Participate with the development of DLP strategies and policies that align with the business goals.
Create and refine DLP classifiers (sensitive information types).
Define and update DLP Policies (rules associated with classifiers).
Manage DLP alerts from DLP Policy matches, including escalations and investigations.
Utilize security tools IDS/IPS, Endpoint Detection and Response.
Conduct regular assessments and audits of data security controls to identify gaps and vulnerabilities.
Investigate security incidents related to data loss or unauthorized data access and develop remediation plans.
Analyze data flows and usage patterns to identify potential data security risks and recommend preventive measures.
Develop and deliver training programs to raise awareness of data protection best practices among employees.
Prepare and present reports on data security incidents and trends to management.
Suggest recommendations for new policies, standards, and procedure.
Use metrics to monitor, report, and improve the effectiveness of DLP controls, providing regular updates to management on the status of data protection efforts. Requirements:8 years of experience in information security
4 years of experience with DLP solutions and technologies and reviewing and remediating DLP alerts.
2 years of experience with Forcepoint DLP
Knowledge of data privacy and protection regulations, including NIST Cybersecurity Framework
Proven expertise in developing and implementing strategic initiatives, complemented by a strong capability for tactical execution and problem-solving
Experience in discovering, cataloging, and protecting sensitive data, including monitoring and preventing data loss
Thorough understanding of Information Management methodologies (data security, access control, classification, retention etc.)
Knowledge in security engineering, network security, authentication and security protocols, cryptography, and application security
Excellent communication and interpersonal skills, capable of working effectively with cross-functional teams and managementAbility to process raw structured and unstructured data (e.g. CSV, JSON)