Senior DLP Security Operations

Pyramid Consulting, Inc. Pay Range

This range is provided by Pyramid Consulting, Inc. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

80.00/hr - 85.00/hr

Immediate need for a talented Senior DLP Security Operations
. This is a 03+ months contract opportunity with long-term potential and is located in Atlanta, GA (Hybrid). Please review the job description below and contact me ASAP if you are interested.

Job : 26-00169

Pay Range
: 80 - 85/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

• Security Monitoring
• Lead the expansion and continuous improvement of Data Loss Prevention (DLP) initiatives across the organization, including international operations, ensuring robust policy enforcement and alignment with regulatory requirements.
• Monitor, investigate, and respond to potential data loss events from both internal and external sources, ensuring swift containment and remediation.
• Administer, tune, and maintain DLP technologies for on‑premise, cloud, SaaS, and endpoint environments to ensure robust policy enforcement.
• Develop, update, and enforce DLP policies and operational playbooks to address evolving data protection risks and regulatory requirements.
• Utilize threat intelligence to adapt DLP controls in response to new tactics, techniques, and procedures (TTPs) that target sensitive or regulated data.
• Review and approve new system deployments to ensure integration with DLP monitoring and compliance requirements.
• Document DLP incidents, investigations, and remediation steps to support regulatory audits and continuous process improvement.
• Collaborate with IT and security teams to automate DLP alerts and responses for faster threat mitigation.
• Provide off‑hours support to address urgent DLP incidents and maintain 24/7 data protection coverage.
• Monitor and review DLP alerts across email, web, endpoint, and cloud.
• Identify and prioritize real incidents vs. false positives.
• Investigate user activity and data movement related to alerts.
• Determine if incidents are accidental, negligent, or malicious.
• Escalate high‑risk cases to Legal, HR, or Security leadership.
• Take action to contain active threats (e.g., disable sharing, isolate devices).
• Document all findings, actions, and outcomes in the case tracking system.
• Recommend user coaching or awareness training when needed.
• Propose improvements to DLP rules to reduce noise and increase accuracy.
• Track and report incident trends and metrics (volume, type, resolution time).
• Collaborate with IT, Legal, HR, and business units during investigations.
• Support audits, compliance checks, and policy updates as needed.
• Obtain information and stay up‑to‑date on the latest threats and security trends to keep the enterprise environment protected.
• Service Desk and Incident Management
• Assist in the investigation and resolution of security issues.
• Security Monitoring
• Work with internal IT teams and external MSSPs for security monitoring of IDS, SIEM, DLP, AV, and Endpoint Security technologies.
• Perform security event correlation, triage, and analysis.
• Apply Security Threat Intelligence to respond appropriately to security events.
• Recognize when a network/system has been compromised from an internal or external threat actor.
• Work on projects to improve security monitoring and response capabilities.
• Strong understanding of defense‑in‑depth security best practices.
• Strong security engineering and architecture background to understand how to employ the most effective and efficient security monitoring.
• Demonstrate effective communication of security issues to management and others.
• Maintain the security monitoring operational guidelines and standards for security.
• Perform incident response and forensic activities for internal and external threats.
• Work with internal IT teams, MSSPs, and external forensic services to respond to incidents.
• Ensure that all identified breaches in security are promptly and thoroughly investigated/remediated.
• Ensure that security incidents are documented accurately and completely.