Sr. Implementation Lead - Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB)

Job Description

Job Description

Job Location - Los Angeles, CA (Hybrid - 3 Days Onsite Weekly)

Type - Contract (12 Months)

Pay Rate - $110.00 - $125.00 Per Hour (W2 Only)

*** Candidates already local to Los Angeles, CA is highly preferred***

Our client based in Downtown Los Angeles is seeking a Senior-level Cybersecurity Professional who is a DLP/CASB subject matter expert to lead the strategic design, technical implementation, and management of DLP and Cloud Access Security Broker (CASB) solutions.

• Strategic Architecture & Roadmap: Lead the design, architecture, and multi-year strategic roadmap for enterprise DLP and CASB solutions, aligning technical controls with business objectives, cloud migration strategies, and complex regulatory frameworks (e.g., GDPR, CCPA, HIPAA).

• Engineering & Ecosystem Integration: Drive the hands-on deployment and technical integration of DLP and CASB platforms with the broader security ecosystem (such as SIEM, IAM, EDR, and SOAR) to enable automated threat response, centralized visibility, and identity-aware access controls.

• Advanced Policy Development & Tuning: Translate legal and business data handling requirements into actionable technical rules using advanced techniques (e.g., Exact Data Match, Indexed Document Matching), continuously tuning these policies to aggressively reduce false positives without disrupting business workflows.

• Cloud Security & Shadow IT Management: Secure sanctioned cloud environments through API and inline CASB controls, actively monitor for and mitigate risks associated with Shadow IT, and execute comprehensive data discovery scans across cloud storage and on-premises infrastructure.

• Operational Health & Incident Escalation: Oversee the capacity planning, lifecycle management, and overall health of the data protection infrastructure, serving as the highest-level technical escalation point for complex insider threat and data exfiltration investigations.

• Governance, Reporting, & Leadership: Partner closely with Legal, Privacy, and HR teams to ensure compliance, develop Key Risk Indicators (KRIs) for executive-level reporting, and provide mentorship and technical guidance to junior security engineers and SOC analysts.

Deliverables:

• Enterprise Data Protection Strategy & Roadmap: A formalized, multi-phase strategic plan and data classification policy framework, tailored to municipal regulatory requirements and formally approved by key client's stakeholders.
• Production-Ready Security Controls: Fully deployed, tuned, and rigorously tested DLP agents (endpoint, network, email) and CASB integrations (API connectors and inline controls) operating seamlessly within the production environment.
• ISOC Standard Operating Procedures (SOPs) & Runbooks: Comprehensive, step-by-step technical documentation detailing alert triage workflows, false-positive tuning methodologies, incident escalation matrices, and routine system maintenance protocols for the Information Security Operations Center.
• Shadow IT Risk Assessment: A formal report generated from initial CASB network telemetry, identifying unsanctioned cloud application usage across the client's network, categorized by risk, with actionable recommendations for consolidation or blocking.
• Data Discovery & Baseline Report: A comprehensive scan report identifying where sensitive/regulated data (e.g., PII, CJIS, HIPAA) currently resides across the client's on-premises file shares, databases, and cloud storage prior to enforcing blocking policies.
• Knowledge Transfer & Enablement Program: Documented, hands-on training sessions and operational workshops delivered to designated ISOC personnel, guaranteeing full operational self-sufficiency and platform proficiency prior to the contract end date.
• Data Exfiltration Incident Response Playbook: A specialized playbook integrated with the client's existing Incident Response plan, detailing the exact cross-departmental steps (Legal, HR, IT) required when a high-severity data breach or malicious insider threat is detected by the DLP/CASB tools.
• Final Project Closure & Risk Assessment Report: A comprehensive handover document detailing all final technical configurations, "as-built" architectural diagrams, and a formal assessment of any identified residual risks, to be delivered no later than December 31, 2026.

Qualifications: