DLP (Data Loss Prevention) Platform Engineer

About this role

The
DLP Platform Engineer
is responsible for designing, implementing, and maturing enterprise
Data Loss Prevention (DLP)
and
CASB
controls across IDEXX’s collaboration and user platforms, including M365, Box, and endpoint/web exfiltration channels. This role ensures that DLP controls are deployed correctly, integrated across systems, and tuned for effectiveness and usability at scale, enabling measurable reduction in data loss and oversharing risk.


This is a hands-on engineering leadership role focused on the how of DLP capability delivery and control effectiveness—working closely with the Data Security Program Lead, Data Security Architect, Cyber Defense/SOC, and IT platform teams.


In this role, you will be responsible for…
DLP / CASB Platform Implementation

• Lead engineering for end-to-end implementation of the CASB/DLP solution across M365 (Exchange, SharePoint, OneDrive, Teams) and Box (internal/external collaboration), including phased rollout and deployment readiness.
• Establish a policy lifecycle and deployment approach (e.g., detect → educate/warn → block) aligned to business risk and adoption goals.
• Implement core detection models for IDEXX-relevant data types (e.g., regulated data, customer data, financial data, IP) using built-in and custom classifiers/regex as appropriate.
• Define and implement channel coverage for exfiltration paths (email, cloud sharing, web upload, removable media where applicable) in coordination with endpoint and browser controls.

Policy Design, Tuning & Effectiveness

• Translate data classification and handling requirements into high-confidence DLP policies that are actionable and enforceable across platforms.
• Continuously tune policies to improve signal quality (reduce false positives, increase true positives) and minimize user friction.
• Establish metrics and dashboards for control performance (alert volume, false positive rate, high-confidence detections, and trend-based risk re...