Requirements
The candidate must have 5+ years of information-security or data-security experience, including hands-on DLP/data-classification experience and at least 2 years of DAM, database-audit or sensitive-data monitoring exposure. A Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, Engineering or an equivalent discipline is required. Experience with enterprise DLP controls, DAM monitoring, DSPM assessments, and integration with SIEM/SOAR is essential.
Description
JOB PURPOSEImplement and operate integrated data-security controls across Data Loss Prevention and Data Classification (DLP/DC), Database Activity Monitoring (DAM), data discovery, encryption and Data Security Posture Management (DSPM).PRIMARY RESPONSIBILITIESOperate enterprise DLP controls across endpoint, email, network/web, Microsoft 365 and cloud/SaaS channels.Configure rules using sensitive information types, regex, dictionaries, fingerprinting, EDM/IDM, classifiers and labels.Support monitor, coach, justify, quarantine, encrypt and block enforcement modes through testing and change control.Investigate DLP incidents, tune false positives and false negatives, manage evidence and process approved exceptions.Administer classification schemes, sensitivity labels, publishing controls and auto-labeling.Operate DAM monitoring for on-premises and cloud databases using agent or agentless approaches.Configure DAM policies for logins, DDL/DML/DCL, privilege changes, sensitive-data access, anomalous queries and bulk extraction.Monitor privileged database activity and correlate relevant sessions with PAM controls.Support DSPM assessments for sensitive-data exposure, excessive access, stale data and risky data flows.Integrate DLP/DC and DAM events with SIEM/SOAR, ITSM, PAM and incident-response workflows.Monitor endpoint, connector, collector, database and policy coverage and maintain operational reporting.JOB SPECIFICATIONSTechnical SkillsForcepoint DLP, Microsoft Purview DLP/Endpoint DLP or equivalent.Data classification, sensitivity labels, sensitive information types, EDM/IDM and fingerprinting.Imperva DAM/SecureSphere or equivalent DAM platform.SQL Server, Oracle, PostgreSQL and cloud database-security fundamentals.DSPM, encryption, key management, SIEM/SOAR, PAM and ITSM integration.CertificationsPreferred: Forcepoint DLP certification/formal training or Microsoft SC-400.Preferred: Imperva DAM/SecureSphere certification or formal equivalent-platform training.Preferred: AZ-500, DP-300, AWS Security Specialty or equivalent.Preferred: Security+, SSCP, CDPSE, CISM or equivalent.Minimum Work Experience5+ years of information-security or data-security experience, including hands-on DLP/data-classification experience and at least 2 years of DAM, database-audit or sensitive-data monitoring exposure.EducationBachelor's degree in Cybersecurity, Information Security, Computer Science, IT, Engineering or an equivalent discipline.