- 经验
- 任何
- 薪水
- —
- 职位空缺
- 1
- 发布
- 2小时前
- 工作模式
- 在办公室
- 恢复
- 需要申请
你的工作地点
职位描述
Job Location and Contract Duration
This role is based in Doha, Qatar and requires onsite presence. The initial contract duration is six months.
Additional Information
- Preference is given to candidates currently residing in Qatar; visa and medical sponsorship are provided for them.
- Candidates from outside Qatar may apply, but relocation expenses such as airfare and accommodation will not be covered.
Key Responsibilities
- Analyze the existing Data Loss Prevention (DLP) architecture, policies, incident frequency, and enforcement weaknesses to develop an Exfiltration Coverage Matrix that categorizes data types, channels, exfiltration vectors, and control measures.
- Focus on prioritizing risky exfiltration methods such as web uploads (POST), personal email usage, unauthorized SaaS or paste sites, removable media, encrypted archives, and significant data extraction behaviors.
- Develop and implement DLP policies and rules across multiple vectors, including endpoints, email, web, SaaS platforms, and networks; ensure detection of sensitive data, contextual controls, enforcement mechanisms, and escalation procedures.
- Design test scenarios and conduct controlled pilot programs; adjust configurations to minimize false positives and negatives; manage exceptions and establish policy precedence.
- Integrate DLP telemetry with Security Operations Center (SOC) tools like SIEM and case management systems; establish severity models and create triage runbooks along with KPIs reporting mechanisms.
- Generate thorough technical documentation and provide training sessions for administrators and SOC staff to enable smooth independent management upon project completion.
Required Experience and Skills
- Extensive experience in engineering DLP policies across endpoints, email, web, and SaaS channels within hybrid IT environments.
- In-depth understanding of data exfiltration threat vectors, contemporary evasion techniques, and strategic deployment of controls.
- Demonstrated history of implementing DLP solutions in financial or governmental sectors, including capabilities for evidence-grade logging and controlled change management.