Sr Security DAP

Roles and Responsibilities

• Engineer, implement, and manage enterprise Data Loss Prevention (DLP) and insider threat monitoring solutions across Mattel’s global environments.
• Develop, configure, and tune DLP and insider threat detection policies to accurately detect and prevent data misuse or unauthorized data movement.
• Integrate DLP and insider threat technologies with identity, cloud, and endpoint platforms to improve visibility, correlation, and automated response.
• Collaborate with Legal, HR, and Compliance teams to ensure insider threat monitoring aligns with ethical, privacy, and global data protection standards.
• Investigate alerts and incidents involving data exfiltration, insider misuse, or suspicious behavior, providing clear documentation and escalation as needed.
• Perform root cause analysis of insider threat events and recommend technical and procedural improvements to reduce risk exposure.
• Create and maintain dashboards and metrics that measure DLP effectiveness, insider threat trends, and overall program performance.
• Collaborate with IT, Infrastructure, and Security Engineering teams to enable secure collaboration and ensure compliance with data handling policies.
• Develop and maintain documentation, operational standards, and playbooks for data loss prevention, insider threat response, and investigation workflows.
• Evaluate and recommend emerging DLP and behavioral analytics tools to enhance detection, monitoring, and response capabilities.
• Support audits and compliance assessments related to data protection and insider threat management frameworks.
• Contribute to continuous improvement initiatives by automating repetitive analysis and monitoring tasks where possible.
• Stay up to date on evolving data protection regulations (e.g., GDPR, CCPA) and ensure that security controls align with compliance requirements.
• 5–7+ years of experience in security engineering, data protection, or insider threat operations within enterprise environments.
• Hands-on experience implementing and managing DLP and insider threat monitoring platforms (endpoint, email, network, and cloud-based).