Data Loss Prevention Engineer
Job title: Data Loss Prevention Engineer in Bethesda, MD at Edgewater Federal Solutions, Inc.
Company: Edgewater Federal Solutions, Inc.
Job description: Overview:Edgewater Federal Solutions is currently seeking a Data Loss Prevention Engineer to provide support to Edgewater Federal government contracts. Responsibilities:
- Implement enterprise-wide Symantec Data Loss Prevention (DLP) solutions
- Migrate DLP capabilities to Office 365 from third party channel DLP solutions
- Integrate DLP solutions with cloud access security brokers (CASB).
- Implement data protection controls in Amazon Web Services (AWS) and Google Compute Platform (GCP).
- Manage a team of engineers in the deployment, integration, and configuration of Symantec DLP solution to protect sensitive data for high value assets and major infrastructure investments.
- Conduct data protections reviews for high value assets and major infrastructure investments to include system inventory, exiting security controls, vulnerability assessment scanning inventory, database security, and application security testing inventory.
- Collaborate with forensics staff on IT security events resulting in law enforcement indictments.
- Develop and deliver essential data profiles for public facing systems across the enterprise resulting in an improved enterprise risk posture and more efficient incident response capabilities.
- Participate in the Privacy Incident Response Team (PIRT) and Federal Privacy Council.
- Enhance and tune standards-based rulesets (HIPAA, PCI-DSS, SSN, CNSSI) and apply them to DLP Tools and SOAR playbooks.
- Support the design and implementation of automated response to DLP incidents
- Assist in the development of security controls framework and assessment of current directives, standards, and patterns.
- Investigate, design, and architect DLP controls as they are identified, developing backlog and gap for analysis.
- Evaluate emerging technologies & risks that will define a security architectural framework with threat modeling methodology.
- 5 or more years of work experience with at least one of those specialized in cyber security
- Bachelor’s Degree (additional years of experience in cyber security reduce this educational requirement)
- A minimum of five (5) years technical experience effectively providing network and/or systems administration, information assurance security, testing, and evaluation.
- Strong knowledge and understanding of Data Loss Prevention and/or Cybersecurity.
- Strong understanding of government privacy standards and related controls like NIST, CSF, PCI-DSS, CMM.
- Strong understanding of Privacy Overlays, protecting PII/PHI/PCI and other sensitive data
- Experience conducting and participating in meetings with remote team members through collaboration technology
- Experience building cybersecurity programs for government agencies.
- Have some experience with the following agile and collaboration technologies: Jira, Confluence, and SharePoint
- Strong Client Interaction and Problem-solving skills
- Ability to obtain Security Clearance of Public Trust once hired
- Certifications in information security (such as GCIA, GCIH, CEH, CISSP, SSCP, Sec+, AWS Security, etc.)
- Experience in a cyber security operational environment
- Security clearance
- Knowledge and experience using an incident response framework
- Programming or scripting experience
- Knowledge of Federal contract vehicles
- Presentation skills