DLP Engineer

act digital; Montreal (administrative region); On-site; CAD 90,000 - 120,000; Full time

Job summary

Act Digital, a global technology and cybersecurity firm, seeks a DLP Engineer to join a major insurance-sector environment in Montréal. You will help design and strengthen data loss prevention capabilities against modern exfiltration risks.

This role fuses DLP engineering, data governance and incident response to deploy policies and continuously test and improve their effectiveness across the environment. You will collaborate with SOC, Compliance and IT teams to elevate protection and governance

Qualifications

• 3–5 years of experience in cybersecurity.
• Hands-on experience with DLP, data protection and governance.
• Experience deploying or administering DLP solutions.
• Experience in enterprise or regulated environments.

Responsibilities

• Review and improve existing DLP policies and use cases.
• Develop new detection logic and data classification rules.
• Validate DLP effectiveness through testing and exfiltration scenarios.
• Identify protection gaps across endpoints, network, cloud and email.
• Map sensitive data flows across the organization.
• Improve detection quality and reduce false positives.
• Support continuous improvement of monitoring and incident response.

Skills

DLP technologies

Data protection

Policy development

Data classification

Log analysis

Regulatory compliance

Python/PowerShell/Bash

Windows/AD knowledge

Analytical investigations

Tools

DLP solutions

Job description

Act Digital is an international technology and cybersecurity consulting company supporting major organizations across digital transformation, cyber defense and security operations.

Within our cybersecurity activities, we support large enterprise and financial-sector clients on topics including:

• SOC operations
• Offensive security
• Purple teaming

We are currently looking for a DLP Engineer to join a major insurance-sector environment in Montreal.

About the Role

As a DLP Engineer, you will help design and strengthen data loss prevention capabilities against modern data exfiltration risks.

This role combines DLP engineering, data governance and incident response activities. The objective is not only to deploy DLP policies, but also to continuously test and improve their effectiveness against realistic data leakage scenarios.

You will work closely with SOC, Compliance and IT teams to strengthen data protection coverage and governance maturity across the environment.

Main responsibilities include:

• Reviewing and improving existing DLP policies and use cases
• Developing new detection logic and data classification rules
• Validating DLP effectiveness through testing and simulated exfiltration scenarios
• Identifying protection gaps across endpoint, network, cloud and email environments
• Mapping sensitive data flows across the organization
• Improving detection quality and reducing false positives
• Supporting continuous improvement of monitoring and incident response capabilities

Qualifications

• 3-5 years of experience in cybersecurity
• Experience in DLP, Data Protection, SOC or Data Governance
• Hands-on experience deploying or administering DLP solutions
• Experience working in enterprise or regulated environments
• Strong understanding of data classification and data leakage risks

Required Skills

• DLP and data protection technologies
• DLP policy development and tuning
• Data classification frameworks
• Log analysis and event correlation
• Regulatory compliance fundamentals (GDPR, PCI-DSS)
• Scripting skills (Python, PowerShell and/or Bash)
• Windows security and Active Directory knowledge
• Strong analytical and investigation capabilities

Preferred Skills

• Experience in financial or highly regulated environments
• Experience with data governance or classification programs
• Experience with detection-as-code methodologies
• Knowledge of insider threat methodologies
• Familiarity with cloud environments (M365, AWS, Azure, GCP)
• Knowledge of modern exfiltration techniques and data flow mapping