DLP Automation Engineer - Data Protection Orchestrator

Goldman Sachs Group, Inc.; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Goldman Sachs Group, Inc. is seeking a Data Loss Prevention Engineer to own end-to-end DLP lifecycle, automate workflows, and enhance detection across Purview, Zscaler, and Proofpoint.

You will work with legal and data owners to translate regulatory requirements into enforcement rules, building scalable, automated review pipelines. The role emphasizes a strong automation mindset, REST API interactions, and collaboration across security stack to minimize false positives and streamline incident

Qualifications

• Experience handling data loss incidents, insider threat investigations, or security incident response.
• Ability to design and tune DLP policies and detection logic.
• Proficiency with REST APIs to pull logs, enrich alerts, and trigger automated actions.
• Experience integrating DLP tooling with SOAR platforms and automated review pipelines.

Responsibilities

• Design, implement and tune DLP detection capabilities and policies across supported tools.
• Develop custom detection logic and integrations for internal systems.
• Test and validate DLP controls to identify coverage gaps and bypass techniques.
• Engineer automation workflows to reduce manual review time and triage low-fidelity events.
• Collaborate with data owners, legal and compliance to translate requirements into enforcement rules.
• Evaluate and integrate additional DLP tools and participate in proof-of-concept trials.

Skills

DLP operations

Automation & scripting

Detection engineering

System architecture

SOAR workflow designing

Tools

Microsoft Purview

Zscaler

ServiceNow

Proofpoint

Job description

Goldman Sachs Group, Inc. is seeking a Data Loss Prevention Engineer to own end-to-end DLP lifecycle, automate workflows, and enhance detection across Purview, Zscaler, and Proofpoint.

You will work with legal and data owners to translate regulatory requirements into enforcement rules, building scalable, automated review pipelines. The role emphasizes a strong automation mindset, REST API interactions, and collaboration across security stack to minimize false positives and streamline incident