Insider Risk & DLP Engineer

Sapsf; United States; Presencial; USD 110.000 - 170.000; Jornada completa

Descripción de la vacante

Sapsf in the United States is seeking a Senior Insider Risk Monitoring professional to support the Microsoft Purview IRM program. You will review anonymized alerts, correlate activity across Teams, SharePoint, and endpoints, and help shape DLP strategies.

The role requires a strong background in cybersecurity, data analytics, and regex/Boolean logic, with high integrity handling sensitive information and a focus on policy automation and risk visualization for leadership.

Formación

• Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems, or equivalent.
• Six years of hands-on experience in insider risk, data protection, or security monitoring.
• Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types.
• Experience with Microsoft 365 Core and Purview.
• High integrity handling highly sensitive information.

Responsabilidades

• Assist in reviewing anonymized alerts in the Purview Insider Risk Management console.
• Identify patterns like Data Resignation (at-risk departing employees) or Data Leaks by correlating activity across Teams, SharePoint, and Endpoint.
• Help manage Data Loss Prevention (DLP) for IRM and Data Protection.
• Optimize Auto-labeling policies to encrypt documents containing PII, PHI, or Intellectual Property.
• Create weekly "Risk Snapshots" for leadership, visualizing trends in sensitive data exfiltration attempts.

Conocimientos

Analytical thinking

Regex

Boolean logic

Discretion

Microsoft 365

Data privacy

Educación

Bachelor's degree in Cybersecurity

Herramientas

Microsoft Purview

Content Explorer

Activity Explorer

DLP policies

Auto-labeling

Descripción del empleo

Sapsf in the United States is seeking a Senior Insider Risk Monitoring professional to support the Microsoft Purview IRM program. You will review anonymized alerts, correlate activity across Teams, SharePoint, and endpoints, and help shape DLP strategies.

The role requires a strong background in cybersecurity, data analytics, and regex/Boolean logic, with high integrity handling sensitive information and a focus on policy automation and risk visualization for leadership.