- Implement, configure, and maintain enterprise Data Loss Prevention (DLP) solutions such as Proofpoint and Mimecast, for both email and endpoint protection.
- Develop, test, and refine comprehensive DLP policies to prevent data exfiltration and ensure adherence to compliance requirements, utilizing regular expressions for accurate content matching.
- Operate and manage existing DLP platforms performing day-to-day monitoring, incident response, and policy tuning based on alerts and false positives.
- Conduct in-depth email threat analysis and manage security configurations within Mimecast and Proofpoint to effectively mitigate phishing, malware, and spam risks.
- Support endpoint security initiatives by integrating DLP controls with existing endpoint protection platforms and actively monitoring data flow to identify potential risks.
- Collaborate with client stakeholders to understand specific data classification requirements and translate them into actionable DLP strategies and technical controls.
- Document DLP system configurations, policy rationales, and operational procedures to maintain a clear and comprehensive record of the security posture.
- Participate in the root cause analysis of DLP incidents,
recommending and implementing preventive measures to enhance overall data protection capabilities.
Requirements
- B.Tech or BCA degree.
- 1-3 years of experience in cybersecurity, with a concentrated focus on Data Leak Protection, Email Threat Analysis, or Endpoint Security.
- Demonstrated experience with at least one full-fledged implementation of an enterprise DLP solution, covering either email or endpoint protection.
- Proficiency in writing, testing, and optimizing regular expressions for accurate data pattern matching and policy enforcement.
- Proven ability to design, implement, and manage complex DLP policies across various organizational structures.
- Hands-on operational and management experience with Proofpoint, Forcepoint, or Mimecast platforms.
Nice-to-Have
- Experience creating Data Flow Diagrams to visualize the movement and storage of sensitive information.
- Familiarity with scripting capabilities in Python or Bash for automating routine security operations tasks.
- Understanding of data classification frameworks and their practical application in DLP strategies.