Data Security Analyst

Data Security Engineer – Level 2

Location: Egypt

Focus Areas: Microsoft Purview, Data Loss Prevention (DLP), Data Classification

Role Summary:

Responsible for the operational management and monitoring of DLP and data classification tools. This includes enforcing labelling policies, triaging alerts, executing remediation actions, and supporting compliance reporting. The role ensures data security configurations remain healthy and effective on a day-to-day basis, escalating complex incidents or tuning requirements to L3. The L2 engineer plays a critical role in maintaining visibility into data handling activities and ensuring security policies are applied consistently across the enterprise.

Responsibilities:

• Implement and operate DLP policy packs and classification labels as defined by L3; publish and monitor alerts.
• Triage DLP alerts, perform initial investigation (identify user, file, source), escalate confirmed incidents.
• Run scheduled data discovery jobs and reconcile classification reports with business units.
• Apply remediation actions (file quarantine, notify user, block share) and follow-up with stakeholders.
• Maintain DLP rule documentation, change logs and support policy tuning cycles.
• Produce routine DLP dashboards and metrics for L3 and compliance teams.
• Assist L3 in audits by collecting evidence artifacts and screenshots; maintain an evidence repository.
• Support user education campaigns and respond to end-user queries about classification and DLP behaviour.
• Keep dictionaries, regex patterns and sensitive type lists updated based on feedback and incidents.

Experience & Skills:

• 5+ years in cybersecurity with 2–4 years of operational experience in data protection, DLP administration, or information security operations.
• Familiarity with Microsoft Purview, labelling, policy enforcement, and monitoring dashboards.
• Experience triaging DLP alerts, performing initial investigations, and escalating incidents.
• Understanding of data classification frameworks and basic compliance concepts.
• Comfortable working with ticketing systems and following defined incident workflows.
• Strong attention to detail and reporting skills.