JOB PURPOSE
Implement and operate integrated data-security controls across Data Loss Prevention and Data Classification (DLP/DC), Database Activity Monitoring (DAM), data discovery, encryption and Data Security Posture Management (DSPM).
PRIMARY RESPONSIBILITIES
- Operate enterprise DLP controls across endpoint, email, network/web, Microsoft 365 and cloud/SaaS channels.
- Configure rules using sensitive information types, regex, dictionaries, fingerprinting, EDM/IDM, classifiers and labels.
- Support monitor, coach, justify, quarantine, encrypt and block enforcement modes through testing and change control.
- Investigate DLP incidents, tune false positives and false negatives, manage evidence and process approved exceptions.
- Administer classification schemes, sensitivity labels, publishing controls and auto-labeling.
- Operate DAM monitoring for on-premises and cloud databases using agent or agentless approaches.
- Configure DAM policies for logins, DDL/DML/DCL, privilege changes, sensitive-data access, anomalous queries and bulk extraction.
- Monitor privileged database activity and correlate relevant sessions with PAM controls.
- Support DSPM assessments for sensitive-data exposure, excessive access, stale data and risky data flows.
- Integrate DLP/DC and DAM events with SIEM/SOAR, ITSM, PAM and incident-response workflows.
- Monitor endpoint, connector, collector, database and policy coverage and maintain operational reporting.
JOB SPECIFICATIONS
Technical Skills
- Forcepoint DLP, Microsoft Purview DLP/Endpoint DLP or equivalent.
- Data classification, sensitivity labels, sensitive information types, EDM/IDM and fingerprinting.
- Imperva DAM/SecureSphere or equivalent DAM platform.
- SQL Server, Oracle, PostgreSQL and cloud database-security fundamentals.
- DSPM, encryption, key management, SIEM/SOAR, PAM and ITSM integration.
Certifications
- Preferred: Forcepoint DLP certification/formal training or Microsoft SC-400.
- Preferred: Imperva DAM/SecureSphere certification or formal equivalent-platform training.
- Preferred: AZ-500, DP-300, AWS Security Specialty or equivalent.
- Preferred: Security+, SSCP, CDPSE, CISM or equivalent.
Minimum Work Experience
- 5+ years of information-security or data-security experience, including hands-on DLP/data-classification experience and at least 2 years of DAM, database-audit or sensitive-data monitoring exposure.
Education
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, Engineering or an equivalent discipline.
