DLP Engineer

Roles and Responsibilities

• Administer, support, and maintain the Forcepoint DLP environment.

• Update and maintain user IDs and Workday dictionaries in Forcepoint.

• Manage the DLP rule library, including policy updates, reconciliation, and ongoing maintenance.

• Perform rule tuning by analyzing DLP incidents, identifying false positives, and implementing policy improvements.

• Document false positive analysis, tuning activities, and policy changes.

• Create and maintain false positive, user, and destination exceptions based on business requirements.

• Collaborate with Tier 2 support teams and Deloitte to investigate, resolve, and optimize DLP incidents.

• Review Forcepoint event output to identify tuning opportunities and improve policy effectiveness while reducing false positives.

• Support incident investigations and ensure DLP policies align with organizational security standards.

• Maintain operational documentation, knowledge articles, and standard operating procedures.

Required Skills

• 5–8 years of experience in Information Security, with at least 4 years of hands-on experience with Forcepoint DLP.

• Strong expertise in Forcepoint DLP policy administration, rule management, and incident analysis.

• Experience in rule tuning, false positive analysis, and exception management (user, destination, and policy exceptions).

• Familiarity with Workday dictionaries, Active Directory, and user identity management.

• Good understanding of DLP concepts, data classification, and data protection controls.

• Strong analytical, troubleshooting, and documentation skills.

• Excellent communication and stakeholder management skills.

• Ability to work effectively in a collaborative onsite environment with internal teams and external partners.