DLP and Security Consultant

Company Description

Role Description

Key Responsibilities

• Assess our current setup (Proxmox virtual environment, Windows 11 virtual machines, BYOD remote access) and recommend the most robust architecture
• Design and harden the remote access method (RDP hardening, VDI, or a zero trust model) so that clipboard, drive mapping, USB redirection, printing, and file transfer to the local device are disabled
• Implement and configure DLP agents on the Windows 11 virtual machines
• Configure network-level controls so the virtual machines can reach only our internal Git server, blocking external code hosting and paste services
• Block exfiltration through personal email, cloud storage, and messaging tools
• Implement screen capture deterrents such as watermarking and application controls
• Set up monitoring, alerting, and reporting for policy violations
• Document the full configuration and provide structured knowledge transfer to our internal team
• Recommend compensating controls for any residual risk, including known BYOD limitations

Required Qualifications

• Minimum 5+ years of experience in IT security, with a strong focus on data protection
• Proven experience designing and deploying DLP solutions in production environments
• Hands-on experience with endpoint DLP products
• Experience securing remote, VDI, or virtualized environments
• Working knowledge of Proxmox or comparable virtualization platforms
• Windows 11 and Windows Server hardening, including Group Policy
• RDP security configuration and session control
• Strong network security skills, including firewalling, egress filtering, and whitelisting
• Ability to work independently and deliver against agreed milestones

Core Competencies

• Data Loss Prevention design and deployment
• Remote access and session hardening
• Virtualized environment security (Proxmox, VDI)
• Network egress filtering and whitelisting
• Endpoint and device control
• Monitoring, alerting, and incident reporting
• Technical documentation and knowledge transfer

Strong Signals

• Prior experience protecting source code or intellectual property for software companies
• Familiarity with BYOD security models and their limitations
• Awareness of UAE data protection considerations
• Relevant certifications (for example CISSP, OSCP, or vendor DLP certifications)
• Experience with zero trust architecture

How To Apply