Data Loss Prevention Subject-Matter Expert​/Technical Lead

Job Summary:

Our client is seeking a Data Loss Prevention Subject‑Matter Expert / Technical Lead to join their team! This position is located in Bethesda, Maryland.

• Lead the design, implementation, and management of Data Loss Prevention (DLP) solutions across enterprise systems, applications, and cloud platforms.
• Develop and maintain agency‑specific secure configuration baselines for multiple operating systems:
  Windows, Linux, macOS, enterprise services, applications, and cloud environments:
  Microsoft 365, AWS, GCP, Azure.
• Assess and interpret federal regulations, cybersecurity standards, and agency policies to create effective DLP strategies and secure configuration baselines.
• Create, configure, and manage GPOs, MDM tools, and automated configuration controls to enforce DLP policies.
• Utilize enterprise scanning tools:
  Tenable.
  
  SC, Nessus, SCAP to validate compliance and detect deviations from DLP policies.
• Serve as a technical lead, guiding stakeholders in implementing secure configuration and DLP standards across the enterprise.
• Lead collaboration forums and working groups with broad stakeholder groups, including cybersecurity, IT operations, and compliance teams.
• Produce professional technical documentation, including business justifications, risk assessments, SOPs, technical guidance, executive briefings, and workflow documentation.
• Ensure DLP and configuration standards align with mission‑critical business requirements and compliance frameworks.
• Mentor team members and provide technical guidance on data protection, secure configuration, and compliance best practices.

• Demonstrated advanced knowledge of enterprise configuration standards and compliance frameworks, including CIS Benchmarks, NIST SP 800‑53 rev 5, NIST Baseline Checklist Repository, and CISA BOD 25‑01 SCuBA Secure Configuration Baselines.
• Hands‑on experience developing secure configuration baselines across multiple operating systems and enterprise applications.
• Proficiency in GPO management, MDM tools, configuration automation, and baseline deviation tracking.
• Familiarity with enterprise scanning and compliance validation tools:
  Tenable.
  
  SC, Nessus, SCAP.
• Strong technical writing skills for business justifications, risk assessments, SOPs, workflows, and executive briefings.
• Experience leading collaboration forums and working groups across technical and operational teams.
• Proven ability to guide stakeholders in secure configuration and DLP implementation for enterprise‑wide consistency.
• Strong problem‑solving and analytical skills to assess risks, identify gaps, and recommend mitigation strategies.
• Excellent verbal and written communication skills to convey complex security concepts to both technical and executive audiences.

• Medical, Dental, & Vision Insurance Plans.
• Employee‑Owned Profit Sharing (ESOP).
• 401(k) offered.

The approximate pay range for this position is between $95,000 and $135,000. The final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.