Sr Security DAP

Responsibilities

• Roles and Responsibilities Engineer, implement, and manage enterprise Data Loss Prevention (DLP) and insider threat monitoring solutions across Mattel’s global environments.
• Develop, configure, and tune DLP and insider threat detection policies to accurately detect and prevent data misuse or unauthorized data movement.
• Integrate DLP and insider threat technologies with identity, cloud, and endpoint platforms to improve visibility, correlation, and automated response.
• Investigate alerts and incidents involving data exfiltration, insider misuse, or suspicious behavior, providing clear documentation and escalation as needed.
• Perform root cause analysis of insider threat events and recommend technical and procedural improvements to reduce risk exposure.
• Create and maintain dashboards and metrics that measure DLP effectiveness, insider threat trends, and overall program performance.
• Collaborate with IT, Infrastructure, and Security Engineering teams to enable secure collaboration and ensure compliance with data handling policies.
• Develop and maintain documentation, operational standards, and playbooks for data loss prevention, insider threat response, and investigation workflows.
• Evaluate and recommend emerging DLP and behavioral analytics tools to enhance detection, monitoring, and response capabilities.
• Support audits and compliance assessments related to data protection and insider threat management frameworks.
• Contribute to continuous improvement initiatives by automating repetitive analysis and monitoring tasks where possible.
• Stay up to date on evolving data protection regulations (e.g., GDPR, CCPA) and ensure that security controls align with compliance requirements.

Requirements

• Working knowledge of privacy and regulatory frameworks including GDPR, CCPA, and ISO 27001.
• Excellent analytical, investigative, and communication skills, with the ability to collaborate across global, cross-functional teams.

Preferred

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field (or equivalent practical experience).
• Certifications such as GCITP, CCITP, CDPSE, or equivalent credentials in data protection or insider threat management.
• Experience with insider threat frameworks and behavioral analytics tools supporting large enterprise environments.
• Familiarity with CASB, DLP-as-a-Service, and cloud security solutions (Microsoft 365, Google Workspace, or equivalent).
• Knowledge of the MITRE ATT&CK framework for insider threat and data exfiltration scenarios.
• Experience conducting forensic investigations related to insider threats, data leakage, or intellectual property protection.

Shift Timing

10:00 – 18:00 PST (22:30 – 06:30 IST), Monday through Friday, with emergency on-call responsibilities as required.