DLP Security Engineer

Requirements:

• You have hands-on experience in information security, with a focus on data loss prevention, detection engineering, or incident response.
• You understand how data flows through modern cloud and SaaS environments, and how internal or external actors can exfiltrate it.
• You have experience with DLP tooling and security logging/monitoring (e.g., SIEM, endpoint, email/CASB, or cloud-native DLP).
• You bring scripting or programming skills (e.g., Python) to automate analysis and improve security workflows.
• You have a solid grasp of threat actor tactics and forensic indicators of data theft or exfiltration.
• You communicate clearly and collaborate with technical and non-technical stakeholders to drive risk mitigation.

Nice to Have:

• Experience with insider-risk programs, threat intelligence, or working in a fast-scaling tech or fintech environment.

What You'll Be Doing:

• Investigating data-loss incidents and near misses, and contributing lessons learned in postmortems to prevent recurrence.
• Improving our data loss prevention program by understanding how internal data is stored, moved, and processed across Bolt's environment.
• Building and tuning detections with the detection engineering team to produce more actionable, less noisy alerts.
• Consuming threat intelligence to mature our program and identify Bolt data leaked to the deep, dark, or public web.
• Participating in on-duty rotation (from 0900AM to 1700AM on Mondays to Fridays) to triage and resolve security cases affecting our internal assets.
• Analysing the business impact of security issues and sharing results with affected teams and stakeholders.

Perks and Benefits:

• Accelerate your professional growth with unique career opportunities.
• Enjoy a rewarding salary and stock options, knowing that as Bolt succeeds, so do you.
• Take care of your physical and mental health with our wellness perks.
• Celebrate 5 years at Bolt with a 1-month paid sabbatical to recharge.
• Connect with colleagues at annual company events and smaller team gatherings.
• Balance flexibility and in-person collaboration with our hybrid model, including at least 12 monthly in-office days.