Senior Security Engineer - Data Loss Prevention

Senior Security Engineer (Data Loss Prevention) will be responsible to manage, tune and expand the global Data Loss Prevention service that protects ZEISS information assets across cloud, endpoint, email, and collaboration platforms using Microsoft Purview. The engineer will also provide escalation support and resolution for complex incidents that cannot be resolved at the L2 level to ensure reliable and compliant service delivery in collaboration with internal stakeholders and external providers.

Primary duties and responsibilities :-

DLP Lifecycle Management: Manage the end-to-end lifecycle of DLP policies across Endpoint, Exchange, SharePoint, OneDrive, and Teams using Microsoft Purview.

Data Classification: Develop, implement and maintain sensitivity labels and auto-labelling policies to ensure data is classified correctly at the point of creation and to ensure data is secure by design.

Incident Response: Lead the investigation of data leakage alerts. Ensure high‑quality, SLA‑compliant service delivery together with providers; serve as escalation point for operational issues.

Policy Tuning: Regularly review and noise-cancel DLP policies to reduce false positives while ensuring high-risk data egress is blocked.

Project and Audits: Lead DLP-related projects of various sizes and support benchmarking, internal audits and security/compliance initiatives

Technical Mentorship: Provide guidance and training to junior security analysts on Purview best practices and incident handling.