About the Company

Act Digital is an international technology and cybersecurity consulting company supporting major organizations across digital transformation, cyber defense and security operations.

Within our cybersecurity activities, we support large enterprise and financial-sector clients on topics including:

- Detection engineering
- SOC operations
- Incident response
- Offensive security
- Purple teaming
- Threat-driven defense improvement

We are currently looking for a DLP Engineer to join a major insurance-sector environment in Montreal.

About the Role

As a DLP Engineer, you will help design and strengthen data loss prevention capabilities against modern data exfiltration risks.

This role combines DLP engineering, data governance and incident response activities. The objective is not only to deploy DLP policies, but also to continuously test and improve their effectiveness against realistic data leakage scenarios.

You will work closely with SOC, Compliance and IT teams to strengthen data protection coverage and governance maturity across the environment.

Main responsibilities include

- Reviewing and improving existing DLP policies and use cases
- Developing current detection logic and data classification rules
- Validating DLP effectiveness through testing and simulated exfiltration scenarios
- Identifying protection gaps across endpoint, network,



cloud and email environments
- Mapping sensitive data flows across the organization
- Improving detection quality and reducing false positives
- Supporting continuous improvement of monitoring and incident response capabilities

Qualifications

- 3-5 years of experience in cybersecurity
- Experience in DLP, Data Protection, SOC or Data Governance
- Hands-on experience deploying or administering DLP solutions
- Experience working in enterprise or regulated environments
- Strong understanding of data classification and data leakage risks

Required Skills

- DLP and data protection technologies
- DLP policy development and tuning
- Data classification frameworks
- Log analysis and event correlation
- Data leakage detection methodologies
- Regulatory compliance fundamentals (GDPR, PCI-DSS)
- Scripting skills (Python, PowerShell and/or Bash)
- Windows security and Active Directory knowledge
- Strong analytical and investigation capabilities

Preferred Skills

- Experience in financial or highly regulated environments
- Experience with data governance or classification programs
- Experience with detection-as-code methodologies
- Knowledge of insider threat methodologies
- Familiarity with cloud environments (M365, AWS, Azure, GCP)
- Knowledge of modern exfiltration techniques and data flow mapping

📌 DLP Engineer (Montreal)
🏢 act digital
📍 Montreal