Information Security Engineer II - Cyber Ops (DLP Monitoring)

Key Deliverables (Duties and Responsibilities)

• Monitor DLP alerts and incidents across endpoints, email, cloud applications, collaboration platforms, removable media, and network channels.
• Review, triage, investigate, and validate DLP policy violations to determine business impact, intent, and risk level.
• Analyze user activities and data movement patterns to identify potential unauthorized disclosure, exfiltration, or misuse of sensitive information.
• Investigate insider risk events, suspicious user behavior, and potential policy violations in accordance with established procedures.
• Collaborate with business units, HR, Legal, Compliance, and Information Security teams during DLP investigations and remediation efforts.
• Escalate high-risk or confirmed data security incidents to relevant stakeholders and incident response teams.
• Support containment and remediation activities for confirmed data leakage incidents.
• Perform root cause analysis of recurring DLP incidents and recommend control improvements to reduce future risk.
• Assist with DLP policy tuning and optimization to improve detection accuracy and reduce false positives.
• Support monitoring and protection of sensitive data, including customer information, financial data, intellectual property, and regulated content.
• Generate investigation reports, case documentation, and incident summaries for management review and compliance purposes.
• Participate in data classification, labeling, and protection initiatives to improve monitoring effectiveness.
• Work with technology teams to onboard new data sources and improve visibility of sensitive data activities.
• Identify trends and emerging risks based on DLP incidents and monitoring activities.
• Maintain investigation records, evidence, and audit documentation in accordance with governance requirements.
• Contribute to awareness initiatives by providing insights into recurring policy violations and user risk patterns.
• Follow established operating procedures, escalation processes, and security controls related to data protection monitoring.
• Support continuous improvements in DLP monitoring capabilities, processes, and operational effectiveness.

Functional Skills

• Strong analytical and investigative skills with the ability to assess data security risks and policy violations.
• Ability to evaluate alerts and distinguish between legitimate business activity and potential data protection risks.
• Strong attention to detail and ability to document findings accurately.
• Effective communication and stakeholder engagement skills.
• Ability to manage multiple investigations and prioritize workload effectively.
• Strong problem-solving skills and a risk-based approach to decision-making.
• Understanding of confidentiality, privacy, and regulatory compliance requirements.

Technical / Business Skills

• 5_ years of experience in Cybersecurity, Security Operations, DLP Monitoring, Insider Risk, Compliance, or Data Protection functions. Experience working with DLP technologies such as Symantec DLP, Microsoft Purview DLP, , Forcepoint DLP, Trellix DLP, Digital Guardian, or equivalent solutions.
• Understanding of data protection concepts including data classification, information lifecycle management, and sensitive data handling.
• Knowledge of Microsoft 365 security technologies, including Exchange Online, SharePoint, OneDrive, Teams, and Purview compliance solutions.
• Familiarity with Insider Risk Management programs and monitoring concepts. Experience analyzing endpoints, email activity, file transfers, cloud application usage, and user behaviors.
• Basic understanding of security investigations, incident management, and case handling processes. Knowledge of regulatory and compliance frameworks such as GDPR, PCI-DSS, SOX, HIPAA, ISO 27001, or similar standards.
• Familiarity with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or Elastic is preferred. Experience preparing investigation reports and supporting audit requirements. Basic scripting or querying skills (KQL, SQL, PowerShell, or similar) are an advantage.

Leadership Qualities

Relationships & Collaboration

Accessibility Needs

Equal Employment Opportunity