You want to create a CloudSOC Office 365 Securlet policy matching a MPIP label using Enforce-managed CDS policy.
First, you need to set up Microsoft Information Protection Classification Credential Profile in Enforce.
Then check System > Settings > Data Classification to see if labels are synced to Enforce successfully.
If you find the label you need to match, you can add the Content Matches MIP classification rule to your policy: