DLP (Data Loss Prevention) Platform Engineer

Job summary

The DLP Platform Engineer is responsible for designing, implementing, and maturing enterprise Data Loss Prevention (DLP) and CASB controls across collaboration and user platforms.

Qualifications

• 5-7+ years of experience in security engineering, data protection, security operations engineering, or related fields
• Demonstrated experience implementing enterprise DLP/CASB solutions
• Strong understanding of common data exfiltration paths and user behavior patterns
• Ability to implement and tune data classifiers
• Experience delivering security controls across collaboration ecosystems
• Experience integrating detections and alerts into SOC workflows
• Familiarity with cloud environments and SaaS security principles
• Strong ownership mentality with a bias toward action and measurable outcomes
• Strong collaboration skills across security, IT, and engineering teams

Responsibilities

• Lead engineering for end-to-end implementation of the CASB/DLP solution
• Establish a policy lifecycle and deployment approach
• Implement core detection models for IDEXX-relevant data types
• Translate data classification and handling requirements into high-confidence DLP policies
• Continuously tune policies to improve signal quality
• Establish metrics and dashboards for control performance
• Integrate DLP alerts and telemetry into the SOC toolchain
• Develop and maintain DLP-related detection logic
• Support creation of playbooks for common scenarios
• Partner with the Data Security Program Lead to deliver roadmap milestones
• Expand DLP coverage over time to additional channels and SaaS applications

Skills

Relocation