About this role
Key Responsibilities
- Design, implement and continuously tune DLP detection capabilities and policies across Microsoft Purview, Zscaler, Proofpoint to maximize true positives and minimize operational friction
- Develop custom detection logic and integrations for internally developed systems
- Perform regular testing and validation of existing DLP controls to identify coverage gaps and bypass techniques
- Engineer automation workflows to assist DLP analysts, reducing manual review time and automating the triage of low-fidelity events
- Act as highest-level technical escalation point for complex data leakage incidents and associated investigations
- Collaborate directly with data owners, legal and compliance teams to translate business and regulatory requirements into technical enforcement rules
- Evaluate and integrate additional DLP tools, and participate in proof-of-concept trials.
Required Technical Skills
- DLP & Security Operations: Proven experience handling data loss incidents, insider threat investigations, or general security incident response. You need to know what a good alert looks like to build one
- Core Stack Expertise: Deep, hands-on administrative experience with tools like Microsoft Purview, Zscaler, ServiceNow and Proofpoint
- Automation & Scripting : Strong proficiency in tools like Python or PowerShell. You must be able to interact with REST APIs to pull logs, enrich alerts, and trigger automated response actions
- Detection Engineering: Proficiency with regular expressions, exact data matching, indexed document matching and custom dictionary creation
- System Architecture: Solid understanding of enterprise network routing, proxies, cloud access, and mail transport rules
What Sets You Apart
- Experience integrating DLP tooling with SOAR platforms (e.g., Splunk SOAR, Cortex XSOAR, Tines) to build end-to-end automated review pipelines
- Background in software engineering or DevSecOps, with an understanding of CI/CD pipelines and version control for managing detection as code
- A “builder” mindset: you prefer to solve problems with code rather than relying solely on out-of-the-box vendor configurations
- Applied AI/ML in Detection Engineering – experience moving beyond static rules by training, tuning and deploying ML classifiers for context-aware data discovery. Familiarity with Microsoft Purview’s Trainable Classifiers or using custom Natural Language Processing models to identify sensitive data types that traditional regex approach misses
- Agentic workflow automation: experience building next-generation, LLM-driven “agentic” workflows. You have moved beyond basic SOAR playbooks and built autonomous systems where AI agents gather contextual telemetry, interact directly with employees (e.g, via MS Teams bots, email, task management systems) to verify business intent, and pre-triage alerts before they are manually reviewed
What We Do
At Goldman Sachs, our Engineers don’t just make things – we make things possible. Change the world by connecting people and capital with ideas. Solve the most challenging and pressing engineering problems for our clients. Join our engineering teams that build massively scalable software and systems, architect low latency infrastructure solutions, proactively guard against cyber threats, and leverage machine learning alongside financial engineering to continuously turn data into action. Create new businesses, transform finance, and explore a world of opportunity at the speed of markets.
Engineering, which is comprised of our Technology Division and global strategists groups, is at the critical center of our business, and our dynamic environment requires innovative strategic thinking and immediate, real solutions. Want to push the limit of digital possibilities? Start here.
Who We Look For
Goldman Sachs Engineers are innovators and problem-solvers, building solutions in risk management, big data, mobile and more. We look for creative collaborators who evolve, adapt to change and thrive in a fast-paced global environment.
ABOUT GOLDMAN SACHS
At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.
We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.
We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html
© The Goldman Sachs Group, Inc., 2023. All rights reserved.
Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.