This Data Loss Prevention (DLP) Security Engineer role in Washington, DC (remote) offers USD 140,000 to 180,000 per year.

Develop and govern DLP policies across on premise and cloud environments
Classify data and monitor data flows to support secure handling
Integrate File Content Analysis (FCA) capabilities with existing security controls
Analyze security incidents and perform investigations related to data loss
Tune and optimize detection rules to improve accuracy and reduce gaps
Ensure compliance with federal cybersecurity and data protection requirements across enterprise systems and cloud environments

7+ years of relevant IT experience
Experience delivering modern security solutions in enterprise settings
Microsoft Purview DLP deployment experience: policy authoring, sensitive information type design, DLP rule tuning across M365, OneDrive, SharePoint Online, and Teams
Forcepoint DLP enterprise deployment experience: endpoint DLP, network DLP, fingerprinting, incident workflow
Experience operating in M365 GCC High and/or Azure IL4+ environments
RMF / ATO documentation experience for DLP solutions, particularly cloud-based with DoD reciprocity
Tier 3 enterprise support experience, including 24x7x365 on-call rotation
Proven track record of DLP rule tuning that reduces false positives
Experience with DISA STIGs as applied to DLP infrastructure
PowerShell / Microsoft Graph API automation for DLP policy management

Data Loss Prevention (DLP) Security Engineer

Job Description