DLP Platform Engineer

Role: DLP Platform Engineer

Onsite role in Irving, TX

W2 Role

JD:

This is a high-visibility individual contributor role where you will serve as the organization s subject matter expert on DLP platform architecture, policy engineering, data classification, and sensitive data discovery. You will be responsible for protecting critical business and customer data at scale across thousands of endpoints, cloud workloads, and SaaS applications while maintaining low false positives and high signal quality. If you are passionate about data protection and enjoy tuning complex policy frameworks, this role is ideal for you.

Key Responsibilities< data-start="852" data-end="900">DLP Platform Engineering & Administration

• Own the end-to-end engineering, configuration, and operational health of enterprise DLP platforms across endpoint, network, and cloud channels.

• Design, deploy, and maintain DLP policies to protect sensitive data including payment card information, employee PII, financial records, and proprietary business data.

• Continuously monitor, tune, and optimize DLP policies to maximize detection accuracy while reducing false positives.

• Manage platform upgrades, feature rollouts, and capacity planning to ensure the DLP infrastructure scales with business growth.

• Develop and maintain platform documentation, runbooks, and standard operating procedures.

< data-start="1569" data-end="1622">Data Classification & Sensitive Data Discovery

• Lead sensitive data discovery initiatives using enterprise classification and content inspection capabilities to identify where sensitive data resides across the organization.

• Design and refine sensitive information types (SITs), trainable classifiers, and labeling policies tailored to the organization s data landscape.

• Partner with data governance, privacy, and compliance teams to ensure classification taxonomies align with regulatory requirements and business needs.

• Conduct ongoing data discovery assessments to identify emerging data risks and ensure new repositories and workflows are covered by DLP controls.

< data-start="2259" data-end="2293">Integration & Collaboration

• Integrate DLP solutions with endpoint protection platforms to extend data protection controls to managed devices across the enterprise.

• Ensure DLP alerts and events flow into the organization s SIEM platform for centralized visibility, correlation, and incident investigation.

• Leverage ITSM tools for incident tracking, workflow automation, and integration with the broader security operations ecosystem.

• Collaborate with Security Operations, Incident Response, and Insider Threat teams to investigate and respond to DLP-triggered events.

• Partner with cloud engineering, endpoint management, and application teams to ensure DLP coverage extends to new technologies and business initiatives.

Required Qualifications

• Bachelor s degree in Computer Science, Cybersecurity, or a related discipline is required; alternatively, four years of cybersecurity experience along with an active CISSP or CISM certification will also be considered.

• 5+ years of progressive experience in data loss prevention, data protection, or a related security engineering discipline.

• Hands-on experience engineering and administering enterprise DLP solutions within a Microsoft 365 environment (or equivalent).

• Strong expertise in DLP policy design, tuning, and false positive reduction across endpoint, network, and cloud channels.

• Practical experience with data classification frameworks, sensitive information types, and automated labeling.

• Experience integrating DLP platforms with SIEM solutions and ITSM tools.

• Excellent analytical and troubleshooting skills with the ability to diagnose complex policy behavior and platform issues.

• Strong communication skills with the ability to translate data protection concepts for technical and non-technical stakeholders.

Preferred Qualifications

• Relevant security and data protection certifications (e.g., data privacy engineering, information protection, or cloud security certifications).

• Experience in large-scale enterprise environments with complex data protection needs.

• Familiarity with PCI DSS, state privacy regulations, or other data protection compliance frameworks.