DLP Engineer

Apptad Inc; Raritan (NJ); On-site; USD 110,000 - 160,000; Full time

Job summary

Apptad Inc. seeks a security-focused analyst to assist in Insider Risk Monitoring, DLP policy management, and auto-labeling optimization. You will correlate data across Microsoft 365 apps, investigate alerts, and generate leadership-ready risk snapshots.

The role requires a degree in cybersecurity or related field (or 6 years hands-on experience) and strong skills in Boolean logic and Regex. Discretion is essential for handling sensitive information in a corporate environment.

Qualifications

• Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years hands-on experience.
• Strong ability to use Boolean logic and Regular Expressions (Regex).
• Familiar with Microsoft 365 Core and understanding file flows from OneDrive to external storage.
• High level of discretion due to handling highly sensitive information.

Responsibilities

• Insider Risk Monitoring: review anonymized alerts to identify patterns like Data Resignation or Data Leaks by correlating activity across Teams, SharePoint, and Endpoint.
• DLP Strategy & Policy: assist in managing Data Loss Prevention for IRM and Data Protection offering.
• Optimization of Auto-labeling policies that encrypt documents containing PII, PHI, or IP.
• Alert Correlation: use Content Explorer to investigate what was shared and Activity Explorer to understand how it was shared.
• Create weekly Risk Snapshots for leadership, visualizing trends in exfiltration attempts.

Skills

Regex

Boolean logic

Discretion

Microsoft 365 Core

Education

Bachelor's degree or higher in Cybersecurity/IS/related

Job description

Key Responsibilities

• Insider Risk (IRM) Monitoring: Assist in reviewing anonymized alerts in the Microsoft Purview Insider Risk Management console - help identify patterns like "Data Resignation" (at-risk departing employees) or "Data Leaks" by correlating activity across Teams, SharePoint, and Endpoint.
• DLP Strategy & Policy: Help manage Data Loss Prevention (DLP) specifically for IRM and Data Protection offering
• Optimization of "Auto-labeling" policies that automatically encrypt documents containing PII, PHI, or Intellectual Property
• Alert Correlation: Use the Content Explorer to investigate what was shared and the Activity Explorer to understand how it was shared
• Create weekly "Risk Snapshots" for leadership, visualizing trends in sensitive data exfiltration attempts.

Technical Qualifications

1. Education: Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years of hands on experience
2. Analytical Logic: Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types.
3. Microsoft 365 Core: Comfortable navigating the M365 ecosystem (understanding how a file moves from OneDrive to an external USB or Personal Cloud).
4. Discretion: High level of integrity; this role involves handling highly sensitive information regarding company risk and employee behavior.