Senior DLP Security Engineer - Data Protection

United States Digital Space LLC; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

United States Digital Space LLC is seeking a Cyber Security Engineer focused on Data Loss Prevention to join our Information Security team. You will design, implement, and tune DLP controls across Microsoft 365, endpoints, cloud apps, and collaboration platforms to reduce data exposure.

The role requires hands-on experience with data classification, sensitivity labels, and policy-based enforcement, plus collaboration with Legal, Compliance, Privacy, Risk, and IT functions to align controls with

Qualifications

• 5+ years of experience in cybersecurity, data protection, security operations, governance, risk, compliance, or related technology roles, or equivalent combination of education and experience.
• Working knowledge of DLP concepts, sensitive data handling, information protection, data classification, and policy-based enforcement.
• Hands-on experience supporting or operating security controls in enterprise environments, especially within Microsoft 365, email, endpoint, cloud, or SaaS platforms.
• Ability to analyze DLP alerts, user activity, sharing patterns, policy matches, and event logs to determine business impact and appropriate response.
• Working knowledge of identity and access concepts, authentication mechanisms, file permissions, collaboration tooling, and data sharing workflows.
• Strong written and verbal communication skills, including the ability to explain technical findings in clear, practical, and business-appropriate language.
• Demonstrated ability to follow structured processes while continuously improving them.

Responsibilities

• Design, implement, and tune enterprise DLP policies across Microsoft 365, endpoint, email, SaaS, cloud, and collaboration platforms.
• Identify, classify, and protect sensitive information using data classification, sensitivity labels, policy conditions, and appropriate enforcement actions.
• Monitor and investigate DLP alerts involving potential data exposure, improper sharing, data exfiltration indicators, or policy violations.
• Partner with Legal, Compliance, Privacy, Risk, Records, and business stakeholders to align DLP controls with regulatory, legal, client, and operational requirements.
• Develop and maintain DLP standards, operating procedures, runbooks, exception processes, and escalation workflows.
• Evaluate and improve controls for collaboration platforms and file-sharing tools, including OneDrive, SharePoint, Box, Google Drive, Dropbox, ShareFile, NetDocuments, and similar services.
• Support CASB and SaaS governance efforts by helping identify unsanctioned data movement, risky sharing behavior, excessive permissions, and opportunities for policy enforcement.
• Conduct root cause analysis on recurring alerts, control gaps, and data handling issues to improve policy quality and reduce false positives.
• Collaborate with security operations, identity, messaging, endpoint, network, and application teams to integrate DLP telemetry into SIEM, SOAR, monitoring, and response processes.
• Prepare clear, business-appropriate communications for end users, technical teams, stakeholders, and leadership regarding DLP findings, policy changes, and recommended corrective actions.
• Provide technical guidance and mentorship to junior analysts and security team members on DLP investigations, data handling risk, and control operations.

Skills

DLP concepts

Data classification

Microsoft 365

Security operations

Tools

Microsoft Purview DLP

Defender for Cloud Apps

SIEM/UEBA tooling

Job description

United States Digital Space LLC is seeking a Cyber Security Engineer focused on Data Loss Prevention to join our Information Security team. You will design, implement, and tune DLP controls across Microsoft 365, endpoints, cloud apps, and collaboration platforms to reduce data exposure.

The role requires hands-on experience with data classification, sensitivity labels, and policy-based enforcement, plus collaboration with Legal, Compliance, Privacy, Risk, and IT functions to align controls with