Talent.com
Lead Data Loss Prevention (DLP) Security Engineer
Lead Data Loss Prevention (DLP) Security EngineerCoStar Group • VA Arlington, US
Lead Data Loss Prevention (DLP) Security Engineer

Lead Data Loss Prevention (DLP) Security Engineer

CoStar Group • VA Arlington, US
[job_card.30_days_ago]
[job_preview.job_type]
  • [job_card.full_time]
[job_card.job_description]

Responsibilities

  • Own the enterprise DLP architecture and roadmap using Microsoft Purview across Exchange Online, SharePoint Online, OneDrive, Teams, Power BI, and Endpoint DLP on managed devices.
  • Design and implement data classification and labeling at scale (sensitivity labels, automatic / manual labeling, protection actions) aligned to the organization’s data taxonomy.
  • Build, test, and tune DLP policies for high‑risk exfiltration vectors (email, cloud storage, chat, web uploads, endpoints : removable media, print, clipboard, Bluetooth, RDP, browser downloads).
  • Stand up and mature advanced classifiers and detections (Sensitive Information Types, Exact Data Match schemas, trainable classifiers) with continuous improvement cycles.
  • Integrate DLP with incident management and SOC workflows (alert triage, case management, evidence capture, automation) and with SIEM (e.g., Microsoft Sentinel) using KQL analytics.
  • Partner with Identity, Endpoint, and Collaboration teams to enforce device / user trust prerequisites, and with Compliance / Legal on retention, eDiscovery, and privacy-by-design.
  • Create enablement content : policy tips, just‑in‑time guidance, and training for end users and privileged administrators to reduce friction and false positives.
  • Establish exception and change management processes, including time‑bound exceptions with compensating controls and periodic recertification.
  • Publish dashboards and KPIs to leadership (coverage, alert volumes, true‑positive rates, MTTR, prevented exfiltration, policy drift).
  • Mentor junior engineers and act as the primary subject‑matter expert for Microsoft Purview DLP.

Basic Qualifications

  • Bachelor’s Degree required from an accredited, not for profit university or college.
  • A track record of commitment to prior employers
  • 8+ years in information security with 3–5+ years focused on enterprise DLP.
  • Hands‑on expertise deploying and operating Microsoft Purview Information Protection & DLP at 5k+ user scale, including Endpoint DLP and M365 workloads.
  • Practical experience with sensitivity labels, automatic and manual labeling, Sensitive Information Types, Exact Data Match (EDM), and trainable classifiers.
  • Proficiency with Kusto Query Language (KQL), PowerShell, and API / automation for policy management and reporting.
  • Experience integrating DLP with SIEM / SOAR, SOC runbooks, and incident / alert handling processes.
  • Strong stakeholder skills : partnering with Legal / Privacy, HR, Compliance, and business units; clear documentation and change management.
  • Working knowledge of data governance and regulatory drivers (e.g., SOX ITGC, PCI, HIPAA, GDPR / CCPA) as they relate to DLP and monitoring.
  • Preferred Qualifications and Skills

  • Track record accelerating a Microsoft Purview rollout from pilot to enterprise adoption, with measurable risk reduction.
  • Experience with Defender for Cloud Apps integration, Defender XDR signal correlation, and Endpoint platform integrations (Intune, Windows, Mac).
  • Knowledge of Microsoft Information Protection (MIP) SDK, Power Automate, or Graph APIs to extend labeling and DLP workflows.
  • Certifications : SC‑400 (Microsoft Information Protection Administrator), SC‑200 (Security Operations Analyst), SC‑100 (Cybersecurity Architect), or IAPP (CIPM / CIPP).
  • What’s in it for You

    When you join CoStar Group, you’ll experience a collaborative and innovative culture working alongside the best and brightest to empower our people and customers to succeed.

    We offer you generous compensation and performance-based incentives. CoStar Group also invests in your professional and academic growth with internal training, and tuition reimbursement.

    Our benefits package includes (but is not limited to) :

  • Comprehensive healthcare coverage : Medical / Vision / Dental / Prescription Drug
  • Life, legal, and supplementary insurance
  • Virtual and in person mental health counseling services for individuals and family
  • Commuter and parking benefits
  • 401(K) retirement plan with matching contributions
  • Employee stock purchase plan
  • Paid time off
  • Tuition reimbursement
  • On-site fitness center and / or reimbursed fitness center membership costs (location dependent), with yoga studio, Pelotons, personal training, group exercise classes
  • Access to CoStar Group’s Diversity, Equity, & Inclusion Employee Resource Groups
  • Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks
  • [job_alerts.create_a_job]

    Loss Prevention Lead • VA Arlington, US

    [internal_linking.related_jobs]
    Senior Security Engineer

    Senior Security Engineer

    SAIC • Washington, DC, United States
    [job_card.full_time]
    We are seeking a skilled Security Engineer with extensive experience in vulnerability remediation at the operating system (OS) level to join our IT team on-site in Washington, D.The ideal candidate...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Remote Information Security Engineer : SIEM, EDR & Cloud

    Remote Information Security Engineer : SIEM, EDR & Cloud

    ISACA • Washington, DC, United States
    [filters.remote]
    [job_card.full_time]
    A well-respected law firm in Washington, DC is seeking an experienced Information Security Engineer to enhance its security operations. This role offers the flexibility to work entirely remote or on...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Senior Public Safety Cyber Architect & Tech Lead

    Senior Public Safety Cyber Architect & Tech Lead

    Accenture • Washington, DC, United States
    [job_card.full_time]
    A leading technology firm is seeking an experienced Senior Cyber Engineer / Security Architect to provide expert-level network security architecture for federal government clients.The role involves c...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Cloud Security Senior Engineer : Design, Secure & Respond

    Cloud Security Senior Engineer : Design, Secure & Respond

    Ernst & Young Oman • Washington, DC, United States
    [job_card.full_time]
    A global consulting firm is looking for a Cloud Security Senior Engineer to protect cloud infrastructure and ensure compliance with industry standards. You will design and implement security archite...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    SIEM & Data Pipeline Lead — Security Infra SME

    SIEM & Data Pipeline Lead — Security Infra SME

    KellyMitchell Group • Bethesda, MD, United States
    [job_card.full_time]
    A leading technical consulting firm is seeking a Security Infrastructure Support – SIEM & Data Pipeline Technical Lead / SME in Bethesda, Maryland. The ideal candidate will have over 10 years of exper...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Data Lead

    Data Lead

    Amyx, Inc. • Washington, DC, United States
    [job_card.full_time]
    Amyx is seeking to hire a Data Lead to support our Department of Homeland Security, CISA contract in the Washington DC area. Recommend a requirements management process including workflows, quality ...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Senior Security Engineer : FedRAMP / NIST & Cloud Security

    Senior Security Engineer : FedRAMP / NIST & Cloud Security

    NetImpact Strategies • Bethesda, MD, United States
    [job_card.full_time]
    NetImpact Strategies seeks a skilled Security Engineer to implement advanced IT security enhancements in Bethesda, MD.The role focuses on managing configurations, deploying diverse infrastructures,...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Sr. Manager - Network Security Engineering & Ops (Remote)

    Sr. Manager - Network Security Engineering & Ops (Remote)

    Donnelley Financial, LLC • Rockville, MD, United States
    [filters.remote]
    [job_card.full_time]
    Join a dynamic team at the pulse of global markets, where we deliver innovative software and service solutions for essential financial reporting and capital markets transactions.At DFIN, we are a v...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Lead Security Engineer

    Lead Security Engineer

    Foxhole Technology • Alexandria, Virginia, United States
    [job_card.full_time]
    Job Title : Lead Security Engineer.Clearance : Top Secret w / SCI eligibility.Start : Based on Contract Award.Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civ...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Lead Platform Engineer (Global Payment Network - Palo Alto, Security, Python, AWS, Terraform, Ansible)

    Lead Platform Engineer (Global Payment Network - Palo Alto, Security, Python, AWS, Terraform, Ansible)

    Capital One • Washington, DC, US
    [job_card.full_time] +1
    Lead Software Engineer, Full Stack (Enterprise Platforms Technology).Do you love building and pioneering in the technology space? Do you enjoy solving complex business problems in a fast-paced, col...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Senior Security Engineer — Cloud & Defense Tech

    Senior Security Engineer — Cloud & Defense Tech

    Anduril • Washington, DC, United States
    [job_card.full_time]
    A defense technology company in Washington, DC seeks a Security Engineer to design and implement security controls across cloud and corporate infrastructures. The ideal candidate will have strong pr...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Data Protection and Security – Principal Architect

    Data Protection and Security – Principal Architect

    Highmark Health • Washington, DC, United States
    [job_card.full_time]
    Develop systems and component architectures and APIs that meet the test of time.Articulate and evangelize architectural principles reciprocally with engineering, architecture and product teams that...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Senior InfoSec Engineer & RMF / NIST Security Leader

    Senior InfoSec Engineer & RMF / NIST Security Leader

    C2 Labs, Inc. • Washington, DC, United States
    [job_card.full_time]
    A tech solutions provider based in Washington is seeking an experienced Information Assurance Engineer / Security Manager to lead the development and management of security infrastructure.The ideal...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Senior MSP Solutions Architect : Cloud Data & Security

    Senior MSP Solutions Architect : Cloud Data & Security

    Rubrik • Washington, DC, US
    [job_card.full_time]
    A tech company is seeking a Sr.Solutions Architect to lead pre-sales activities, collaborate with partners, and define market-ready cloud solutions. The ideal candidate will have 7-8 years in cloud ...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    DLP Engineer [JOB ID 20251117]

    DLP Engineer [JOB ID 20251117]

    Phoenix Cyber • Washington, DC, US
    [job_card.full_time]
    [filters_job_card.quick_apply]
    Phoenix Cyber is looking for a DLP Engineer to join our client delivery team.This position is onsite at the client location. Endpoint data protection program (such as ForcePoint...[show_more]
    [last_updated.last_updated_variable_days]
    Data Security Engineer

    Data Security Engineer

    BOOZ, ALLEN & HAMILTON, INC. • Arlington, VA, US
    [job_card.full_time] +1
    Architect, deploy, and configure data security solutions across various clients for DoD, IC, and Civilian Federal clients. Create new architectures to meet client requirements adhering to Zero T rus...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Senior DoD IA Security Lead — RMF & Risk Expert

    Senior DoD IA Security Lead — RMF & Risk Expert

    Akima Infrastructure Services, LLC • Washington, DC, United States
    [job_card.full_time]
    A federal IT contractor is seeking a Senior System Security Information Assurance Subject Matter Expert in Washington, DC. The role involves leading cybersecurity functions and maintaining complianc...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Staff ML Engineer, Fraud Data — Remote

    Staff ML Engineer, Fraud Data — Remote

    Plaid • Washington, District Of Columbia, United States
    [filters.remote]
    [job_card.full_time]
    A leading fintech company is seeking a Staff Machine Learning Engineer for its Fraud Data team.This role involves designing scalable ML infrastructure and leading the evolution of model deployment ...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]