Job Posting Title: Data Loss Prevention & Cloud Access Security Broker Engineer

Location: Noida Sector 62

Shift and Schedule: 5 Days Office (Rotational)

Summary:

The DLP & CASB Engineer is responsible for managing and enhancing the organization’s Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) platforms to protect sensitive data across cloud, email, endpoint, and web channels.

This role combines technical investigation, policy engineering, and platform administration to ensure data protection, regulatory compliance, and effective response to data security incidents.

The engineer will collaborate with SOC teams, platform SMEs, and governance stakeholders to drive continuous improvement in DLP/CASB detections, automation, and policy lifecycle management.

:

Key Responsibilities:

- Incident Review & Investigation
- Policy Management & Tuning
- Platform Operations & Maintenance
- Governance, Reporting & Compliance
- Collaboration & Continuous Improvement

Review, analyze, and validate DLP and CASB alerts escalated by L1 analysts, ensuring accurate triage and risk classification.

Investigate potential cases of data exfiltration, misuse, or policy violations across multiple channels:

Email (O365, Exchange Online Protection, Gmail)

Endpoint (Device Agents, Removable Media)

Web/Cloud Applications (Box, OneDrive, SharePoint, Google Drive, Salesforce, etc.)

Correlate events across systems (DLP, CASB, SIEM, and EDR) to identify multi-vector data leakage attempts.

Escalate confirmed incidents with detailed context, evidence, and recommended containment actions to L3 SMEs or Incident Response teams.

Participate in Root Cause Analysis (RCA) for confirmed data leakage incidents and propose preventive actions.

Collaborate with DLP/CASB SMEs to fine-tune detection rules, thresholds, and patterns to reduce false positives while maintaining high detection fidelity.

Implement rule and policy changes based on evolving business and regulatory requirements (typically 10–50 changes per month for CASB).

Manage policy lifecycle processes, including testing, deployment, rollback, and documentation.





Contribute to the development of custom detection patterns, data classifiers, and policy templates aligned with organizational data categories (PII, PCI, IP, etc.).

Maintain synchronization and policy consistency across cloud and endpoint channels.

Monitor and ensure operational health and performance of DLP and CASB platforms (e.g., Forcepoint, Netskope, Microsoft Defender for Cloud Apps, Symantec, McAfee, or Palo Alto Prisma Access).

Validate integration with SIEM and ITSM tools (e.g., ServiceNow, Microsoft Sentinel, Splunk) for alert ingestion, incident tracking, and reporting.

Coordinate with OEM vendors and internal platform teams for:

Product patching and upgrades

Rule deployment validation

Performance tuning and incident troubleshooting

Maintain system hygiene, ensuring agents, connectors, and sensors are active and updated across all endpoints and applications.

Conduct periodic configuration reviews to validate coverage, data patterns, and rule logic.

Maintain comprehensive incident logs, RCA records, and policy change documentation.

Support creation of monthly dashboards, SLA reports, and KPI summaries related to DLP/CASB operations.

Participate in governance forums, audit reviews, and client-facing reporting sessions to present performance trends, risk metrics, and improvement plans.

Ensure data protection configurations align with compliance frameworks (e.g., GDPR, HIPAA, PCI DSS, ISO 27001).

Collaborate with risk and compliance teams to align detection and response strategies with corporate data handling policies.

Work closely with L1 monitoring teams, providing guidance on triage, escalation, and classification best practices.

Support cross-skilling initiatives and assist in developing and updating SOPs, knowledge base articles, and training materials.





Participate in threat modelling and data exfiltration use case development to enhance proactive detection and prevention capabilities.

Identify and recommend automation opportunities for incident enrichment, false-positive suppression, and report generation.

Job Qualifications

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a grown mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Job Summary

We are seeking an experienced DLP & CASB Security Engineer with 5+ years of experience in designing, implementing, and managing Data Loss Prevention (DLP) and CASB solutions. The ideal candidate should have hands-on expertise in Forcepoint DLP, Netskope DLP, and Netskope CASB to protect enterprise data across endpoints, email, web, and cloud environments.

Key Responsibilities:

Required Technical and Professional Experience

Preferred Technical and Professional Experience

Implement, administer, and optimize DLP and CASB solutions.

Manage and tune policies in Forcepoint DLP and Netskope DLP.

Configure and support Netskope CASB for cloud application security.

Monitor alerts, investigate incidents, and reduce false positives.

Define and enforce data protection policies (PII, PCI, PHI, etc.).

Work closely with SOC, IT, and cloud teams for incident response and remediation.

Generate reports and maintain compliance documentation.

5+ years of experience in DLP and CASB technologies.

Strong hands-on experience with Forcepoint DLP and Netskope (DLP & CASB).

Knowledge of data classification, data protection frameworks, and compliance standards.

Experience in policy creation, tuning, and incident handling.

Positive understanding of networking, cloud security, and SaaS applications.

Experience integrating DLP/CASB with SIEM tools.

Relevant certifications in Forcepoint or NetskopeTop of Form

📌 DLP & CASB Engineer (Noida)
🏢 Kyndryl
📍 Noida