DLP Engineer

CPX; Abu Dhabi; On-site; AED 240,000 - 360,000; Full time

Job summary

CPX is seeking a senior Data Loss Prevention Engineer to operate and engineer DLP controls across Forcepoint DLP, Microsoft Purview and connected data protection technologies. You will handle incident triage, testing, health monitoring and evidence management under the direction of the DLP Specialist.

Responsibilities include monitoring alert queues, validating incidents, implementing policy changes, and producing operational reports.

Qualifications

• 7+ years of information security or security operations experience, including at least 2 years of hands-on DLP administration or incident operations.
• Bachelor’s degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
• Postgraduate qualification in information/cyber security is an advantage.

Responsibilities

• Operate and engineer DLP controls across Forcepoint DLP, Microsoft Purview and related technologies under guidance of DLP Specialist.
• Monitor DLP alert queues and triage incidents across endpoints, email, network and cloud channels.
• Validate incident context, policy match, data sensitivity and business justification; escalate high-risk cases promptly.
• Implement approved DLP policy changes, classifiers, thresholds and actions with change control.
• Execute test cases for monitor, quarantine and block actions before production deployment.
• Maintain evidence and audit-ready logs; prepare operational reports on alerts and health checks.
• Support policy tuning, pilot programs and user communications; ensure least privilege and data minimization.

Skills

Analytical thinking

Attention to detail

Communication

Teamwork

Prioritization

Education

Bachelor’s degree in CS/Cybersecurity/IT/IS/Engineering

Postgraduate qualification in information/cyber security (advantage)

Tools

Forcepoint DLP

Microsoft Purview

Endpoint DLP

Job description

Operate and engineer client Data Loss Prevention controls under the direction of the DLP Specialist. The role performs platform administration, incident triage, policy implementation, testing, health monitoring, troubleshooting and evidence management across Forcepoint DLP, Microsoft Purview and connected data protection technologies.

Primary Responsibilities : -

• Monitor DLP alert queues and triage incidents across endpoint, email, network, Microsoft 365 and cloud/SaaS channels.
• Validate incident context, policy match, data sensitivity, user activity and business justification; escape high-risk cases promptly.
• Implement approved DLP policy changes, classifiers, thresholds, actions, exceptions and user notifications under change control.
• Execute test cases for monitor, coach, justify, quarantine and block actions before production deployment.
• Administer Forcepoint DLP components, endpoint agents, discovery tasks, connectors, policy deployments and system health checks.
• Support Microsoft Purview DLP, Endpoint DLP, sensitivity label integration and Activity/Content Explorer investigations.
• Investigate agent/connector failures, policy deployment issues, false positives, workflow errors and performance problems.
• Maintain allowlists, dictionaries, keyword lists, fingerprints, EDM datasets and detection patterns as approved.
• Create and update incidents, service requests, changes and problem records in the ITSM platform; meet agreed SLAs.
• Capture complete evidence, actions, approvals, communications, timestamps and closure rationale for audit readiness.
• Prepare operational reports covering alert volumes, policy hits, false positives, open cases, endpoint coverage and service health.
• Support DLP policy tuning, business-unit pilots, user communication and remediation validation.
• Follow least privilege, dual-control, data minimization and confidentiality requirements when handling sensitive data.

Skills / Certifications: -

• Forcepoint DLP Administrator training
• SC-400 or equivalent Microsoft Purview training
• CompTIA Security+ or equivalent
• ITIL Foundation (advantage)
• Soft skills: Excellent written and verbal communication, Analytical thinking and problem solving.
• Attention to detail and quality, Accountability and ownership,
• Teamwork and stakeholder collaboration.
• Ability to prioritize and meet deadlines.
• Ability to work at client sites and provide after-hours support when required

Minimum Work Experience & Education: -

• 7+ years of information security or security operations experience, including at least 2 years of hands-on DLP administration or incident operations.
• Bachelor’s degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
• Postgraduate qualification in information/cyber security is an advantage.