DLP Automation & Detection Engineer

Goldman Sachs; Dallas (WV); On-site; USD 150,000 - 190,000; Full time

Job summary

Goldman Sachs is seeking a Data Loss Prevention (DLP) Engineer to lead the end-to-end lifecycle of our DLP program. You will design, implement, and continuously tune detection rules, and analyze complex DLP events across the security stack, with a strong automation mindset using SOAR and ServiceNow to streamline case management.

You will collaborate with data owners, legal and compliance to translate regulatory requirements into enforcement rules, evaluate new DLP tools, and participate in

Qualifications

• Experience handling data loss incidents, insider threat investigations, or security incident response.
• Hands-on with Microsoft Purview, Zscaler, ServiceNow, and Proofpoint.
• Proficient in Python or PowerShell and REST API integrations.
• Strong regex, data matching, and custom dictionary creation.
• Solid understanding of enterprise network routing and mail transport rules.

Responsibilities

• Design, implement and tune DLP detection policies across platforms.
• Develop custom detection logic and integrations for internal systems.
• Test and validate DLP controls to identify coverage gaps.
• Automate workflows to reduce manual review and triage low-fidelity events.
• Collaborate with data owners, legal and compliance to translate requirements into rules.
• Evaluate additional DLP tools and participate in proof-of-concept trials.

Skills

DLP & Security Operations

Core Stack Expertise

Automation & Scripting

Detection Engineering

System Architecture

Tools

Microsoft Purview

Zscaler

ServiceNow

Proofpoint

Splunk SOAR

Cortex XSOAR

Tines

Job description

Goldman Sachs is seeking a Data Loss Prevention (DLP) Engineer to lead the end-to-end lifecycle of our DLP program. You will design, implement, and continuously tune detection rules, and analyze complex DLP events across the security stack, with a strong automation mindset using SOAR and ServiceNow to streamline case management.

You will collaborate with data owners, legal and compliance to translate regulatory requirements into enforcement rules, evaluate new DLP tools, and participate in