MS Purview DLP SME

Job Title: MS Purview DLP SMEDuration: PermanentLocation: QuwaitJob DescriptionWe are seeking a skilled Data Loss Prevention (DLP) Engineer/Analyst to manage, optimize, and continuously enhance DLP systems and processes. The role focuses on protecting sensitive data, improving detection capabilities, and integrating DLP operations with broader cybersecurity and incident response functions.Key ResponsibilitiesDLP Operations & ManagementManage and operate enterprise DLP solutions across endpoints, networks, and cloud environmentsEnsure high availability, performance, and effectiveness of DLP toolsPolicy Configuration & TuningDesign, implement, and fine-tune DLP policies aligned with organizational data protection requirementsReduce false positives/negatives through continuous tuning and optimizationMonitoring & Incident HandlingMonitor DLP alerts and events in real-timePerform alert triage, investigation, and incident handlingEscalate critical incidents based on severity and business impactIntegration with Security EcosystemCollaborate with SOC and Cybersecurity teams for incident response and threat mitigationIntegrate DLP solutions with SIEM, SOAR, and other security platformsEnhancement & AutomationEnhance DLP functionalities through integrations, automation, and custom use casesSupport API-based integrations and workflow improvementsContinuous ImprovementDevelop and refine DLP use cases based on emerging threats and business needsConduct regular reviews of policies, controls, and detection logicRecommend improvements aligned with industry best practicesDocumentation & ReportingMaintain documentation for policies, procedures, and incident handlingGenerate reports on DLP incidents, trends, and system effectivenessRequired QualificationsBachelor’s degree in Computer Science, Information Security, or a related field3–7 years of experience in DLP, cybersecurity operations, or information securityHands-on experience with enterprise DLP tools (e.g., Symantec DLP, Microsoft Purview DLP, Forcepoint, etc.)Strong understanding of data classification, data protection, and privacy principlesExperience in monitoring, alert triage, and incident response processesFamiliarity with SIEM tools and security operations workflowsGood analytical and problem-solving skillsPreferred CertificationsCertified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)Certified Information Systems Auditor (CISA)GIAC Data Loss Prevention (GDLP) or equivalentMicrosoft Security certifications (e.g., Security Operations Analyst, Purview)Any SOC or incident response-related certificationsKey SkillsDLP policy design and tuningIncident investigation and responseSecurity monitoring and alert analysisIntegration with SOC/SIEM/SOAR platformsAutomation and scripting (Python, PowerShell preferred)Strong communication and collaboration skills