DLP (Data Loss Prevention) Platform Engineer

Job summary

The DLP Platform Engineer is responsible for designing, implementing, and maturing enterprise Data Loss Prevention (DLP) and CASB controls across IDEXX’s collaboration and user platforms, including M365, Box, and endpoint/web exfiltration channels.

Benefits

Qualifications

• into high-confidence DLP policies that are actionable and enforceable across platforms.
• Continuously tune policies to improve signal quality (reduce false positives, increase true positives) and minimize user friction.
• Establish metrics and dashboards for control performance (alert volume, false positive rate, high-confidence detections, and trend-based risk reduction).
• Partner with stakeholders to implement user-facing controls (coaching, justification prompts, approvals) before enabling block actions broadly.
• INTEGRATION & OPERATIONALIZATION WITH THE SOC
• Integrate DLP alerts and telemetry into the SOC toolchain (SIEM/Case management) to enable triage, investigation, and escalation workflows.
• Develop and maintain DLP-related detection logic, routing, and severity models so SOC investigations are consistent and efficient.
• Support creation of playbooks for common scenarios (mass external sharing, mass download, suspicious upload, risky OAuth app activity where applicable), including evidence sources and response actions.
• Establish a feedback loop with SOC and Data Security Operations to refine policies based on incident patterns and operational findings.
• CROSS-FUNCTIONAL COLLABORATION
• Partner with the Data Security Program Lead to deliver roadmap milestones and ensure stakeholder alignment across IT, Data Engineering, and Security Operations.
• Partner with the Data Security Architect to align DLP policy design to enterprise control patterns and data management standards.

Responsibilities

• In this role, you will be responsible for…

Skills

Certifications

Degrees

Languages

Industry

Company size