Information Protection Engineer - DLP

Company - Our client is a rapidly growing cybersecurity solutions and services provider that helps organizations strengthen data protection, security operations, and risk management. The organization has been recognized among North America's leading technology solution providers and is known for its customer-first approach to cybersecurity.

\n

\n

Job Title - Information Protection Engineer - DLP

\n

Location - Hybrid in Downtown Boston, MA — 3–4 days onsite and 1–2 days remote per week

\n

Role Type - 6-month contract

\n

\n

Must Have Skills:

\n

• \n
• 3–6+ years of information security/data protection experience involving information protection, data security, DLP, security engineering, or a related discipline
• \n
• Hands-on enterprise DLP engineering experience implementing, administering, maintaining, testing, tuning, and improving DLP technologies and policies
• \n
• Strong Microsoft Purview expertise, particularly Purview DLP, Information Protection, sensitivity labels, and data-classification capabilities
• \n
• Hands-on data discovery, classification, and labeling experience, including automated/recommended labeling, sensitive information types, trainable classifiers, Exact Data Match, or related technologies
• \n
• Strong business partnership and practical risk mindset, with the ability to work directly with data owners, Legal/Compliance, Information Security, and business stakeholders while minimizing false positives and unnecessary business disruption
• \n

\n

\n

Responsibilities and Job Details:

\n

• \n
• Design, administer, maintain, and enhance enterprise DLP policies across supported platforms and data channels
• \n
• Configure, test, tune, and optimize DLP policies to strengthen information protection while reducing false positives
• \n
• Design and maintain Microsoft Purview sensitivity labels, classification policies, and associated protection controls
• \n
• Partner directly with business units and data owners to understand where sensitive information is created, stored, shared, and used
• \n
• Identify unlabeled, mislabeled, or inadequately protected sensitive information and coordinate remediation with business owners
• \n
• Integrate data classification and sensitivity labels with DLP, encryption, access controls, endpoint controls, and other protection capabilities
• \n
• Investigate DLP alerts and events, determine appropriate disposition, and escalate issues when necessary
• \n
• Analyze DLP and classification activity to identify control gaps, emerging risks, recurring behaviors, and opportunities for improvement
• \n
• Develop metrics and reporting around labeling coverage, DLP effectiveness, policy adoption, exceptions, and information-protection trends
• \n
• Explore automation and AI-assisted capabilities to improve data discovery, classification, labeling, monitoring, investigation, and response
• \n
• Partner with GRC and Compliance teams to provide technical expertise, evidence, metrics, and control documentation for audits, due diligence, risk assessments, and regulatory requirements
• \n

\n