Role :Security Operations Engineer II Data Loss Prevention (DLP). Experience :6 years. Location :Pune. NOTE :Immediate joiner. Mandatory Skills. DLP, data classification, and/or data protection, SIEM, IDS/IPS, EDR, Unix/Linux/Windows Operating DESCRIPTION (DETAILED) :. Review and manage DLP alerts.
Conducts DLP event investigations and provides escalation management.
Identifies DLP ruleset tuning opportunities and communicates the recommendations.
Understand technology infrastructure and operational processes in order to enable a more effective response process.
Creates operational runbooks and response processes and procedures.
Effectively investigative and conduct root cause analysis, identifying indicators of attack or compromise, attack vectors.
Deliver verbal and written reports as needed.
Participates in on-call rotation (including weekends) to ensure continuous operations.
Participates in internal incident response exercises and drills.
Experience And Educational Requirements. 5+ years' experience in areas of DLP, data classification, and/or data protection.
OC, DLP, Incident Response Engineer. Hands-on experience with SIEM, IDS/IPS, EDR, and other security technologies.
Experience with Unix/Linux/Windows Operating Systems.
Working knowledge of Shell/Bash/Python.
Excellent written and verbal communication skills, with experience presenting technical information to both technical and non-technical audiences.
Bachelor's Degree in Cybersecurity, Risk Analysis, Computer Science, Information Systems or other related field, or equivalent work experience.
Design, implement, and manage data loss prevention solutions for clients.
Work with clients' IT teams to identify data leakage risks and develop DLP strategies to mitigate them.
Implement and maintain DLP policies and procedures.
Perform regular DLP scans and audits to identify and address any security gaps.
Conduct research and stay up to date with the latest DLP technologies and best practices.
Work collaboratively with other members of the Cyber Security Engineering Team to ensure that all security solutions are integrated and functioning optimally.