Endpoint Data Loss Prevention Lead

Vanguard

. Lead the technical migration from legacy endpoint DLP agents such as Digital Guardian to cloud-delivered endpoint protection platforms such as Zscaler Client Connector and Zscaler Endpoint DLP .

Posted 10/16/2026full-timeUnited StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in endpoint DLP engineering and operations, particularly with Zscaler Endpoint DLP and Digital Guardian. Proven ability to lead technical migrations, develop automation strategies, and mentor junior staff in a highly regulated environment.

Highest-signal resume keywords

Zscaler Endpoint DLP ExpertiseDigital Guardian ManagementEndpoint Security Migration LeadershipScripting and Automation with PythonSIEM Platform Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Endpoint DLP EngineeringPolicy DeploymentIncident AnalysisAutomation DevelopmentData Security Technology EvaluationREST API IntegrationCI/CD AutomationMetrics ReportingAgent Deployment ManagementControl Set Design

Soft Skills

MentoringKnowledge TransferCollaboration

Tools & Technologies

Zscaler Client ConnectorElasticSplunkJIRAConfluenceServiceNowAgile/Scrum

Certifications & Qualifications

CISSPCCSPGCFAGCEDZscaler CertificationDigital Guardian Certification

Industry Keywords

Information SecurityData ProtectionRegulatory ComplianceFinancial ServicesIncident Workflow Administration

Tech Stack

Tools & technologies

CloudCyber SecurityPythonServiceNowSplunk

About the role

Key responsibilities & impact

Lead the technical migration from legacy endpoint DLP agents such as Digital Guardian to cloud-delivered endpoint protection platforms such as Zscaler Client Connector and Zscaler Endpoint DLP
Develop agent coexistence strategies, policy parity mapping, and phased cutover plans
Design and enforce end-user notification, coaching, and justification workflows
Build REST API, SIEM/SOAR, and CI/CD automation and integrations
Reduce manual effort in policy deployment, incident enrichment, and reporting
Define and report coverage, detection efficacy, false positive rate, mean time to triage, and policy drift metrics to security leadership
Evaluate emerging data security technologies
Mentor junior engineers and analysts and lead knowledge transfer and cross-training initiatives
Participate in special projects and perform other assigned duties

Requirements

What you’ll need

Minimum 8 years in information security, including at least 5 years of hands-on endpoint DLP engineering and operations
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent professional experience considered
Deep hands-on expertise with Zscaler Endpoint DLP (ZDP) / Zscaler Data Protection, including Zscaler Client Connector, forwarding profiles, and endpoint policy configuration
Hands-on expertise with Digital Guardian, including DGMC policy and rule authoring, agent deployment and upgrade management, control set design, and incident workflow administration
Experience leading an endpoint security agent migration or consolidation at enterprise scale
4+ years of scripting and automation experience with Python, PowerShell, or Shell
3+ years working with security telemetry and SIEM platforms such as Elastic or Splunk for endpoint DLP incident analysis and reporting
Proficiency in JIRA, Confluence, ServiceNow, and Agile/Scrum delivery
Preferred: Experience with Microsoft Purview Information Protection, sensitivity labeling, and Microsoft 365 oversharing remediation
Preferred: Experience implementing data controls for GenAI and LLM usage, including prompt and upload inspection
Preferred: Familiarity with UEBA and insider risk analytics platforms
Preferred: CISSP, CCSP, GCFA, GCED, Zscaler, or Digital Guardian certifications
Preferred: Experience supporting regulatory examination and audit evidence production in financial services or another highly regulated environment
Must be able to work without visa sponsorship; Vanguard is not offering visa sponsorship for this position

Benefits

Comp & perks

Hybrid working model with in-person learning, collaboration, and connection
Opportunities to learn and develop skills individually and as a team