About the Company
Act Digital is an international technology and cybersecurity consulting company supporting major organizations across digital transformation, cyber defense and security operations.
Within our cybersecurity activities, we support large enterprise and financial-sector clients on topics including:
- Detection engineering
- SOC operations
- Incident response
- Offensive security
- Purple teaming
- Threat-driven defense improvement
We are currently looking for a DLP Engineer to join a major insurance-sector environment in Montreal.
About the Role
As a DLP Engineer, you will help design and strengthen data loss prevention capabilities against modern data exfiltration risks.
This role combines DLP engineering, data governance and incident response activities. The objective is not only to deploy DLP policies, but also to continuously test and improve their effectiveness against realistic data leakage scenarios.
You will work closely with SOC, Compliance and IT teams to strengthen data protection coverage and governance maturity across the environment.
Main responsibilities include:
- Reviewing and improving existing DLP policies and use cases
- Developing new detection logic and data classification rules
- Validating DLP effectiveness through testing and simulated exfiltration scenarios
- Identifying protection gaps across endpoint, network, cloud and email environments
- Mapping sensitive data flows across the organization
- Improving detection quality and reducing false positives
- Supporting continuous improvement of monitoring and incident response capabilities
Qualifications
- 3-5 years of experience in cybersecurity
- Experience in DLP, Data Protection, SOC or Data Governance
- Hands-on experience deploying or administering DLP solutions
- Experience working in enterprise or regulated environments
- Strong understanding of data classification and data leakage risks
Required Skills
- DLP and data protection technologies
- DLP policy development and tuning
- Data classification frameworks
- Log analysis and event correlation
- Data leakage detection methodologies
- Regulatory compliance fundamentals (GDPR, PCI-DSS)
- Scripting skills (Python, PowerShell and/or Bash)
- Windows security and Active Directory knowledge
- Strong analytical and investigation capabilities
Preferred Skills
- Experience in financial or highly regulated environments
- Experience with data governance or classification programs
- Experience with detection-as-code methodologies
- Knowledge of insider threat methodologies
- Familiarity with cloud environments (M365, AWS, Azure, GCP)
- Knowledge of modern exfiltration techniques and data flow mapping
