Threat Intelligence Lead Job Southampton area,England UK,IT/Tech

Direct message the job poster from Lorien

Sourcing Consultant at Lorien:
Empowering Businesses with Strategic Procurement Solutions

Job Posting: L3 Insider Threat Engineering Lead - DLP

Location: Remote UK

Job Type: Contract

About the Role

We are seeking a highly skilled L3 Insider Threat Engineering Lead - DLP to manage and enhance our Insider Threat Data Loss Prevention (DLP) capabilities. This role is pivotal in ensuring the effectiveness of our DLP platform and leading a globally distributed team of engineers. Reporting to the Global Head of Insider Threat, you will play a crucial role in safeguarding sensitive data and mitigating insider risks.

Key Responsibilities

Oversee the technical management, troubleshooting, and administration of the DLP platform.

Lead and mentor a diverse team of Insider Threat Engineers specializing in DLP, providing guidance, coaching, and technical expertise.

Collaborate with the L1 Insider Threat Manager, the L3 Insider Threat Engineering Lead – IRM, and senior leadership to refine strategies, rules, policies, and procedures for data loss prevention.

Develop and maintain a technical roadmap aligned with the overall cybersecurity strategy.

Optimize and fine-tune DLP policies to minimize false positives and enhance detection accuracy.

Work closely with IT, Cybersecurity, HR, Legal, and Compliance teams to enforce data protection standards and regulatory requirements.

Conduct regular assessments and audits to drive continuous improvement in DLP and Insider Threat programs.

Provide detailed reports on DLP effectiveness, emerging threats, and mitigation strategies to senior leadership.

Identify trends in insider threats and recommend enhancements to existing DLP policies and security controls.

Secondary Responsibilities

Contribute to projects that strengthen insider threat detection and data protection policies.

Perform additional tasks as assigned by the Global Head of Insider Threat.

Qualifications & Experience

Required:

Extensive experience managing Insider Threat and DLP engineering teams in a large global enterprise.

Strong technical expertise in the Microsoft Security stack, particularly Purview DLP, Insider Risk Management (IRM), and Microsoft Defender.

Relevant Microsoft certifications in Purview DLP, IRM, and Defender.

Deep understanding of data protection laws and compliance requirements (e.g., GDPR, CCPA, HIPAA).

Strong problem-solving and troubleshooting skills in complex security environments.

Excellent leadership, communication, and stakeholder management skills.

Self-motivated with the ability to work independently and drive initiatives.

Preferred:

Experience with audits such as SOC
2.

Prior experience deploying or managing Microsoft IRM within a global enterprise.

Industry certifications such as CISSP, CISM, or CIPP.

Experience with CASB and UEBA technologies.

Why Join Us?

Work with a high-performing global cybersecurity team.

Lead cutting-edge Insider Threat and DLP initiatives.

Opportunity to shape security strategies in a fast-paced enterprise environment.

Competitive salary, benefits, and career growth opportunities.

Seniority level

Mid-Senior level

Employment type

Contract

Job function

Consulting

Industries

IT Services and IT Consulting