Data Loss Prevention Engineer

About the Role

Cherry Bekaert is looking for a Data Loss Prevention (DLP) Engineer to help build and strengthen its enterprise data protection program.

In this role, youll design, implement, and optimize DLP controls across Microsoft Purview, cloud platforms, and network/email security toolsensuring sensitive data is protected and aligned with regulatory and security standards.

What Youll Do

DLP Strategy & Implementation

• Design and manage DLP policies across Microsoft 365 (Exchange, SharePoint, OneDrive, Teams) and endpoints
• Implement data protection controls for PII, PCI, PHI, and confidential data
• Extend DLP capabilities across Zscaler (network) and Proofpoint (email)
• Evaluate and integrate modern DSPM tools for enhanced visibility

Monitoring & Incident Response

• Monitor alerts and investigate DLP incidents across systems
• Triage and escalate policy violations as per security procedures
• Optimize policies to reduce false positives while maintaining coverage
• Maintain logs for audit and compliance support

Program Development

• Support the organizations data classification framework
• Identify gaps in DLP coverage and recommend improvements
• Contribute to audit readiness (SOC 2, ISO 27001)

Collaboration & Business Enablement

• Work closely with IT, Security, and business teams
• Advise stakeholders on secure data handling practices
• Support security awareness and training initiatives

What Were Looking For

• 5+ years of experience in Information Security / DLP / Cloud Security
• Strong hands-on experience with Microsoft Purview DLP
• Knowledge of Microsoft 365 data classification (labels, EDM, classifiers)
• Familiarity with network DLP, SSL/TLS inspection, or SASE environments
• Experience handling DLP alerts, tuning policies, and incident analysis
• Understanding of compliance frameworks like SOC 2, HIPAA, PCI-DSS

Nice to Have

• Experience with Zscaler DLP or Proofpoint Email Security
• Exposure to DSPM tools (Varonis, Laminar, Symmetry, etc.)
• Experience in Azure AD / Entra ID environments
• Certifications like SC-400, CISSP, CISM, or CISA

Tech Stack Youll Work With

• Microsoft Purview (Primary DLP platform)
• Zscaler (Network security)
• Proofpoint (Email security)
• Microsoft Defender for Endpoint
• Microsoft Sentinel / Log Analytics

About Cherry Bekaert

Cherry Bekaert is a leading advisory, assurance, and tax firm helping organizations move forward with confidence. With a strong national presence, the firm delivers innovative solutions across industries.