Data Security Expert（DLP）

About this role

Responsibilities

•
Design the company-wide data security scheme under the new financial system, and be responsible for the implementation.

•
Develop and enhance data security detection capabilities, including but not limited to DLP, data encryption and data masking.

•
Continuously validate existing data security rules and models; follow up on data security incident identification, response, handling, investigation, and forensics.

•
Continuously improve risk identification capabilities in data security by optimizing detection rules and models to optimize the overall detection coverage; build data asset maps; use graph detection and other techniques to trace data flows and identify sensitive data exfiltration risks.

•
Explore and apply AI / LLM techniques to enhance security detection and response, and build AI-driven detection, triage, and automated response solutions.

Job Requirements

•
Major in information security, network security, or computer science; 8–10 years of relevant experience in data security.

•
Hands-on experience with endpoint and email data loss prevention (DLP).

•
Familiar with the data security lifecycle, understanding the risk points and key objectives at each stage.

•
Familiar with common security offense and defense techniques, with experience in building security operations and managing data security risks; strong sensitivity to data exposure risks.

•
Familiar with data security products and detection methods such as DLP, UEBA, sensitive data identification, data encryption/decryption, and secure data sharing.

•
Experience with enterprise-level endpoint data protection solutions; experience in endpoint security, familiarity with macOS and Linux systems, and hands-on experience in data threat modeling is a plus.

•
Experience with enterprise-level big data analysis tools such as Flink, Hive, Spark, ElasticSearch, and graph technologies; hands-on experience in security data mining, analytics, or threat intelligence analysis is a plus.

•
Strong logical thinking and communication skills, with a good understanding of compliance and legal considerations.

Preferred Qualifications

•
Data security expert, directly responsible for DLP capacity building and implementation in financial institutions.

•
Experience designing endpoint data protection agent solutions.

•
Experience detecting or analyzing internal and external data leakage.

•
Experience in data lineage analysis, graph-based security analytics, or sensitive data flow tracing.

•
Hands-on experience with security data models, detection rule engines, or in-house security product…