Build, tune, and operate enterprise DLP controls across multiple OS environments; automate DLP operations using LLMs and agentic AI; partner with cross-functional teams to deploy data protection technologies; monitor program metrics and support compliance, risk measurement, and long-term data protection strategy.

Lead end-to-end insider threat investigations, triage alerts from SIEM/UBA/DLP/endpoint signals, collect evidence and conduct interviews, produce decision-ready briefs and risk assessments, drive detection and automation improvements, and partner with Legal, HR, and business teams to reduce insider risk at scale.

Triage and investigate insider threat alerts using SIEM, UBA, DLP, and endpoint detection; collect evidence, conduct interviews, coordinate with Legal/HR, produce investigative reports, and recommend mitigations and detection improvements.