Mid-Level Data Protection, DLP Analyst

Jobtailor; United States; On-site; USD 90,000 - 120,000; Full time

Job summary

Jobtailor seeks a DLP operations professional to protect sensitive client information across data in use, at rest, and in transit. You will define, discover, and safeguard sensitive information in diverse storage and usage scenarios, while preventing exfiltration and providing visibility into encrypted traffic.

The role requires 3+ years in data protection or DLP operations, experience with enterprise DLP platforms, and strong analytical and communication skills to work with technical

Qualifications

• Bachelor's degree or equivalent experience.
• 3+ years hands-on data protection or DLP operations experience.
• Experience with enterprise DLP platforms (Microsoft Purview, Forcepoint, Broadcom/Symantec, Trellix).
• Knowledge of PII, PHI, and CUI handling and data classification practices.

Responsibilities

• Operate DLP tools and processes to protect sensitive client information across data in use, in transit, and at rest.
• Define and protect sensitive information regardless of storage or usage.
• Prevent exfiltration while supporting visibility into encrypted traffic.

Skills

DLP operations

Data protection

Policy enforcement

Data classification

Stakeholder communication

Education

Bachelor's degree in related field

Tools

Microsoft Purview

Forcepoint

Broadcom/Symantec

Trellix

Job description

Responsibilities

• Operate DLP tools and associated processes to automatically protect sensitive client information across data in use, in transit, and at rest.
• Define, discover, and protect sensitive information regardless of where or how it is stored or used.
• Prevent exfiltration through network gateways and endpoints while supporting visibility into encrypted traffic.
• Provide automated policy enforcement to safeguard sensitive data and support privacy requirements.
• Support and validate discovery of sensitive information within repositories such as SharePoint, network drives, and databases using data‑at‑rest DLP capabilities.
• Implement technical measures that help protect sensitive information from inadvertent disclosure and exfiltration on endpoints, across the network, and within storage environments.
• Support the deployment of DLP agents on targeted endpoints that routinely handle sensitive data.
• Track endpoint DLP agent deployment for targeted devices and support enterprise reporting needs.
• Analyze DLP alerts and events, distinguish true policy violations from false positives, tune detection rules to reduce noise, and escalat[e] confirmed incidents to the incident response team with complete context.
• Contribute to DLP policy enforcement documentation, sensitive‑data discovery validation results, and ad hoc information security reporting.

Requirements

• Bachelor's degree in a related field, or equivalent experience as allowed by company and contract policy.
• Three or more years of hands‑on data protection or DLP operations experience.
• Experience with enterprise DLP platforms such as Microsoft Purview, Forcepoint, Broadcom/Symantec, Trellix, or similar tools.
• Knowledge of PII, PHI, and CUI handling requirements and data classification practices.
• Understanding of data protection across data at rest, in transit, and in use, including network and endpoint DLP.
• Familiarity with the Privacy Act of 1974 and PHI/HIPAA considerations in a federal environment.
• Strong analytical, organizational, and communication skills with the ability to work effectively across technical stakeholders.
• Ability to meet federal background investigation requirements.

Demonstrates expertise in Data Loss Prevention (DLP) operations, including the implementation and management of DLP tools to protect sensitive information across various environments. Proficient in analyzing DLP alerts, policy enforcement, and compliance with data protection regulations.