DLP Automation Engineer

The Goldman Sachs Group; Town of Texas (WI); On-site; USD 140,000 - 200,000; Full time

Job summary

The Goldman Sachs Group is seeking a Data Loss Prevention (DLP) Engineer to own the end-to-end DLP program. You will design, implement and tune detection rules, and drive automation across SOAR, ServiceNow, and cloud security tools to protect highly sensitive data.

You will collaborate with data owners, legal and compliance to translate business requirements into enforcement rules, test controls, and evaluate new DLP tools and POC opportunities to reduce manual review.

Qualifications

• Proven experience handling data loss incidents, insider threat investigations, or security incident response.
• Hands-on experience with Microsoft Purview, Zscaler, ServiceNow and Proofpoint.
• Proficiency in Python or PowerShell and REST API interactions.
• Experience with regular expressions, exact data matching, and dictionary creation.
• Solid understanding of enterprise network routing, proxies, cloud access, and mail transport rules.

Responsibilities

• Design, implement and tune DLP detection capabilities across Purview, Zscaler, Proofpoint to maximize true positives and minimize operational friction.
• Develop custom detection logic and integrations for internally developed systems.
• Perform regular testing and validation of existing DLP controls to identify coverage gaps and bypass techniques.
• Engineer automation workflows to assist DLP analysts, reducing manual review time and automating triage of low-fidelity events.
• Collaborate with data owners, legal and compliance teams to translate business and regulatory requirements into technical enforcement rules.
• Evaluate and integrate additional DLP tools, and participate in proof-of-concept trials.

Skills

DLP & Security Ops

Core Stack Expertise

Automation & Scripting

Detection Engineering

System Architecture

Tools

Microsoft Purview

Zscaler

ServiceNow

Proofpoint

Splunk SOAR

Cortex XSOAR

Tines

Job description

The Goldman Sachs Group is seeking a Data Loss Prevention (DLP) Engineer to own the end-to-end DLP program. You will design, implement and tune detection rules, and drive automation across SOAR, ServiceNow, and cloud security tools to protect highly sensitive data.

You will collaborate with data owners, legal and compliance to translate business requirements into enforcement rules, test controls, and evaluate new DLP tools and POC opportunities to reduce manual review.