Senior Data Loss Prevention (DLP) Architect & Engineer
$110,000–$160,000 year
On-sitePhiladelphia, Pennsylvania, United States or Jersey City, New Jersey, United States
Job Summary
Design and continuously improve enterprise Data Loss Prevention (DLP) architecture across network, endpoint, email, and cloud channels. Deploy, configure, and tune DLP solutions at enterprise scale while building policy rulesets, data dictionaries, and custom detectors for sensitive data types including PII, NPI, and MNPI. Engineer end-to-end event monitoring pipelines that integrate DLP alert telemetry into SIEM platforms for correlation and dashboarding. Lead the planning and execution of DLP-related changes, ensuring adherence to change management processes and documenting design decisions, configuration updates, and rollback plans. Serve as a technical escalation point for complex incidents, conducting root cause analysis and driving remediation in coordination with leadership. Partner with Legal, Risk, and Compliance teams to translate regulatory obligations into technical controls and support audits for SEC, FINRA, PCI-DSS, and SOX. Mentor junior analysts on tooling, investigation techniques, and policy management.
Required Qualifications
- 8+ years of progressive experience in information security
- 5 years focused on Data Loss Prevention architecture, engineering, and operational leadership in large enterprise environments
- Demonstrated experience in designing, implementing, and optimizing both network DLP (web, email, cloud) and endpoint DLP (agent-based, EDR integrated) across large enterprise environments
- Zscaler DLP - Required; demonstrated expertise in design, implementation, policy development, tuning, troubleshooting, and ongoing operations
- Excellent written and verbal communication skills with the ability to translate technical and business risk into actionable recommendations to executive-level audiences and produce high-quality documentation
- Bachelor's degree in Computer Science, Information Security, Information Technology, or a related technical discipline required
Desired Qualifications
- Master's degree in Cybersecurity, Information Assurance, or equivalent preferred
- Relevant industry certifications are highly desirable, including but not limited to CISSP, CISM, CCSP, GIAC, Security+, or vendor-specific DLP certifications
- Candidates with deep expertise in multiple DLP platforms and a proven track record of leading enterprise DLP programs will be strongly preferred
- Proofpoint DLP - Strongly Preferred; experience with data protection controls, policy configuration, incident management, and integrations
- Microsoft Purview Information Protection & DLP – Preferred; experience implementing and managing endpoint, cloud, and Microsoft 365 DLP capabilities, including data classification and sensitivity labeling
- Preference will be given to candidates with experience/skills in one or more of the following: Splunk (ES / SIEM) - Experience with developing security use cases, dashboards, correlation searches, alerting, and reporting
- Preference will be given to candidates with experience/skills in one or more of the following: Microsoft Sentinel - Experience with integrating DLP telemetry, developing analytics rules, searches, alerting, reporting, and automating response workflows
- Preference will be given to candidates with experience/skills in one or more of the following: Microsoft Defender XDR - Experience with leveraging endpoint, email, and cloud security signals to enhance data protection, insider risk detection, and incident response capabilities
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.