Data Loss Prevention Security Engineer

About this role

Agile Defense seeks a Data Loss Prevention Security Engineer to design and manage enterprise data protection solutions using Microsoft Purview and related tools. The role involves implementing DLP policies, managing sensitivity labels, investigating incidents, and ensuring compliance with frameworks like NIST 800-171 and CMMC across Microsoft 365 and endpoint environments.

What you'll do

• Implement and maintain Microsoft Purview, DLP, and Information Protection policies and procedures
• Develop and tune DLP rules for endpoints to control data flow across approved boundaries
• Manage sensitivity labels, encryption, and content marking across Microsoft 365 and integrations
• Investigate and respond to DLP incidents using Defender XDR and Sentinel
• Maintain DLP dashboards and reporting to track violations and policy effectiveness
• Collaborate with IT teams to align DLP policies with regulatory requirements like CUI and FCI

What they're looking for

• Microsoft Purview Information Protection/DLP
• Microsoft 365 E5 Security and Defender for Endpoint
• Data classification and compliance frameworks (NIST 800-171, CMMC, ISO 27001, HIPAA)
• KQL queries and Microsoft Sentinel
• DLP rule logic and sensitivity label configuration
• Intune app protection and Entra ID management
• Incident response and SOAR/ticketing tools (Jira)
• ZScaler and Qualys (preferred)

Benefits

• Salary: $130,000 - $142,000
• Remote work location
• Opportunity to work on national security missions
• Subject matter expert role in data protection
• Collaborative environment with elite technical teams