Senior Data Loss Prevention Engineer

Security Governance | Job Description | Senior DLP Engineer

If you want to be a part of a dynamic, forward-thinking Governance, Risk and Compliance organization focused on building a best-in-class, cutting edge governance program, come join the Security Governance Team at Okta. As a critical foundation of GRC, the Security Governance team’s mission is to provide the documentation, policy adherence, and advisory backbone needed to drive secure operations and behaviors at Okta and position the company as a global leader in security best practices. We are seeking a dedicated and detail-oriented Senior Data Loss Prevention (DLP) Engineer to join our team. The ideal candidate will play a critical role in safeguarding sensitive information against unauthorized access, use, disclosure, disruption, modification, or destruction.

The Senior DLP Engineer is responsible for monitoring and configuring Okta’s DLP solutions to protect our organization's data. This role requires a thorough understanding of DLP technologies, data classification, risk management, and will possess the ability to respond swiftly and effectively to security incidents along with a proven track record of collaborating with various stakeholders to ensure compliance with data security requirements.

The right candidate will have experience operating in a mature security control environment and will have a strong background in managing, responding to, and investigating DLP alerts and potential data loss incidents. The ideal DLP Engineer will be able to identify patterns and trends in data loss incidents, create or update DLP policies accordingly, and recommend enhancements to such as compensating controls or other preventative measures. This role will collaborate closely with a number of cross-functional teams, including legal, compliance, and technology teams, and create clear and concise reports on data loss incidents.

The Senior DLP Engineer will have strong familiarity with security compliance frameworks (e.g., NIST, ISO, PCI) and will be competent in summarizing complex scenarios for management review. If you are a self-starter who wants to make a difference in a global cloud security company, come help us lead the way.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field
• 5+ years of experience in information security with a focus on data loss prevention
• Strong understanding of data protection principles and technologies
• Proficiency in DLP tools; experience with Code42 is a plus
• Experience with network security, endpoint security, and cloud security solutions
• Certifications such as CISSP, CISA, CISM, or CDPSE are preferred
• Demonstrated experience working in commercial security roles aligned with security compliance frameworks (e.g., NIST, ISO, PCI)
• Experience in building productive relationships and driving collaboration with both technical and non-technical teams
• Clear ability to communicate the desired business outcomes and requirements to technologists building solutions
• Ability to operate effectively in a remote environment
• Self-starting, self-motivated, self-directed, and self-sufficient

Responsibilities

• Continuously monitor DLP systems for alerts and potential data loss incidents
• Analyze and investigate alerts to determine the legitimacy and severity of potential threats
• Identify patterns and trends in data loss incidents to enhance preventative measures
• Respond to DLP alerts and incidents promptly, performing root cause analysis and implementing corrective actions
• Collaborate with the Cyber Defense Team to manage and resolve data-related incidents
• Assist in the development, implementation, and maintenance of DLP policies, rules, and procedures
• Review and update DLP policies to adapt to changing business needs and threat landscapes
• Work closely with IT, Legal, Compliance, and other business units to ensure execution of comprehensive data protection strategies
• Provide clear and concise reports and documentation on data loss incidents and resolutions
• Ability to manage complex projects, including identifying dependencies and evaluating impact

#LI-REMOTE