DLP Engineer

Experience- 3 Years

Location- Bangalore

Second round of interview is Face 2 Face.

Looking for immediate joiners.

Key Responsibilities

• Implement, manage, and optimize Data Loss Prevention (DLP) solutions across enterprise environments.
• Hands-on experience with enterprise security technologies including Data Loss Prevention (DLP), Endpoint Detection & Response (EDR), Email Security, and Secure Web Gateway (Proxy) solutions.
• Configure and maintain DLP policies for data classification, monitoring, and protection.
• Monitor DLP alerts and incidents, investigate potential data leakage events, and drive timely remediation.
• Work closely with Security Operations, IT, Cloud, and Business teams to strengthen data protection controls.
• Identify sensitive data repositories and recommend security measures to reduce data exposure.
• Manage DLP controls across endpoints, email systems, cloud applications, and collaboration platforms.
• Perform root cause analysis for security incidents and provide corrective and preventive actions.
• Develop and maintain DLP dashboards, reports, and metrics for management review.
• Assist in regulatory compliance initiatives related to data protection and privacy requirements.
• Conduct periodic reviews and fine-tuning of DLP policies to minimize false positives.
• Participate in security audits, risk assessments, and compliance reviews.
• Create and maintain operational documentation, runbooks, and incident response procedures.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
• 3-5 years of experience in Information Security, with hands-on experience in DLP technologies.
• Experience with DLP solutions such as:
• Microsoft Purview DLP
• Symantec DLP
• Forcepoint DLP
• Trellix (McAfee) DLP
• Broadcom DLP
• Strong understanding of data classification, data protection, and information security principles.
• Experience in endpoint, email, network, and cloud DLP implementations.
• Knowledge of Microsoft 365 Security, Exchange Online, SharePoint Online, Teams, and OneDrive security controls.
• Familiarity with SIEM tools such as Splunk, Sentinel, QRadar, or LogRhythm.
• Understanding of security frameworks and standards such as ISO 27001, NIST, PCI-DSS, and GDPR.
• Strong incident investigation, troubleshooting, and analytical skills.
• Knowledge of Windows and Linux operating systems.
• Good understanding of networking and security fundamentals.

Good to Have

• Experience with Microsoft Purview Information Protection and Compliance solutions.
• Exposure to CASB technologies such as Microsoft Defender for Cloud Apps.
• Experience with Cloud Security (Azure, AWS, or GCP).
• Knowledge of Insider Risk Management and Data Governance solutions.
• Familiarity with scripting languages such as PowerShell or Python.
• Security certifications such as:
• SC-400 (Microsoft Information Protection Administrator)
• AZ-500
• Security+
• CEH
• CISSP (preferred)

Behavioral Competencies

• Strong ownership and accountability.
• Excellent analytical and problem-solving skills.
• Effective stakeholder management and communication skills.
• Attention to detail and commitment to data security.
• Ability to work independently and collaboratively in a fast-paced environment.
• Proactive approach toward identifying and mitigating security risks.
• Strong documentation and reporting capabilities.