Amazure Technologies Pvt Ltd
Website:
amazuretec.com
Job details:
Description for L2 Forcepoint DLP Engineer and Senior DLP Engineer L3
L2 Forcepoint DLP Engineer
Location : Pune
Mode : On site
Experience: 3–6 years in DLP/Security Operations (1–3 years Forcepoint DLP)
Shift: Business hours with on-call support for critical incidents
Key Responsibilities
1. L2 Support & Advanced Troubleshooting
- Provide Level 2 support for Forcepoint DLP-related incidents escalated from L1.
- Perform root cause analysis (RCA) for complex incidents: agent failures, policy misconfigurations, false positives/negatives.
- Troubleshoot :-
-Endpoint agent communication failures, performance degradation.
-TLS/SSL inspection issues, reverse proxy conflicts.
-Email DLP (Exchange Online, SMTP gateway) issues.
-Web DLP (HTTP/HTTPS uploads, cloud storage) issues.
-DSPM connector failures, data discovery errors, classification mismatches.
- Resolve application compatibility conflicts across Windows/Mac endpoints.
- Coordinate with Forcepoint Support for bugs, patches, and hotfixes.
2. DLP Policy Management & Tuning
- Create, implement, and optimize Forcepoint DLP policies based on security requirements.
- Tune detection methods:
- Exact Data Matching (EDM) for structured data
- File Fingerprinting (structured & unstructured) up to 100M files
- OCR, Dictionaries, Natural Language Processing (NLP) scripts
- Content inspection rules, insider threat workflows
- Reduce false positives while maintaining high detection accuracy
- -Validate policy efficacy regularly and adjust rules based on business feedback
- Manage Endpoint Classification policies:
- MIP label import/application (Azure Information Protection).
- Custom labels, sensitivity tags, third-party classification integration.
3. Incident Response & Remediation
- Lead response to data leakage incidents and security breaches.
- Investigate detection, mitigation, and evidence generation for unauthorized access events.
- Perform single-click remediation: block, encrypt, quarantine, coach users.
- Document incident timelines, actions taken, and lessons learned.
- Prepare incident reports for management and compliance audits.
4. Platform Maintenance & Upgrades
- Perform routine system health checks, patch updates, and version upgrades.
- Execute maintenance windows with minimal service disruption.
- Restore DLP infrastructure from backups when required.
- Manage enforcer configurations, agent deployments, and policy synchronization.
- Monitor system performance (CPU, memory, disk) and optimize as needed.
5. DSPM Operations & Data Classification
- Administer Forcepoint DSPM for data discovery across:
-Cloud: AWS S3, Azure Blob, Google Cloud Storage, Microsoft 365 (OneDrive, SharePoint)
-On-prem: File servers, databases, network shares
- Configure DSPM connectors, API integrations, and authentication
- Review DSPM classification results and validate AI Mesh technology outputs
- Remediate risks to sensitive data: access governance, encryption, policy enforcement
- Integrate DSPM with DLP for unified data protection (classification tags used by both)
6. Integration & Automation
- Integrate Forcepoint DLP/DSPM with enterprise technologies:
-SIEM: Splunk, QRadar (log forwarding, correlation rules)
-ITSM: ServiceNow (incident, change, problem management)
-Active Directory/Azure AD (user sync, groups, RBAC)
-APIs for automation workflows and custom reporting
- Develop scripts (PowerShell/Python) for automation:
-Policy deployment validation
-Agent health checks
-Incident data extraction
-Report generation
7. Collaboration & Knowledge Sharing
- Work with Threat Intelligence, Network Security, Endpoint Security teams.
- Provide guidance and mentorship to L1 Engineer.
- Conduct knowledge sharing sessions on DLP/DSPM best practices.
- Maintain accurate documentation of configurations, policies, RCA, and incident responses.
8. Compliance & Audit Support
- Align DLP/DSPM policies with regulations: GDPR, CCPA, HIPAA, PCI-DSS, ISO 27001
- Support audit readiness: evidence generation, compliance validation, policy reviews
- Participate in security assessments, gap analysis, and remediation planning
Education
B.E./B.Tech in IT/Computer Science or MCA
- Experience with DSPM or cloud data security (AWS/Azure/GCP) preferred
Technical Skills
- Deep knowledge of Forcepoint DLP (Endpoint, Network, Email, Web, Cloud)
- Forcepoint DSPM (data discovery, AI classification, cloud connectors)
- Endpoint Classification: MIP/Azure Information Protection, custom labels
- DLP Detection Methods: EDM, Fingerprinting, OCR, NLP (300+ scripts), Regex, Dictionary
- Active Directory/Azure AD integration, RBAC, user context in incidents
- Troubleshooting: TLS/SSL, reverse proxies, SMTP, UDP/TCP, XML validation
- Scripting: PowerShell, Python, batch scripting for automation
Tools
- Forcepoint Security Manager (FSM) / ONE Data Security portal
- SIEM (Splunk/QRadar) for log analysis and correlation
- ServiceNow/Jira for ITSM workflows
- APIs for automation (REST API)
- VPN, remote access tools, packet capture (Wireshark)
Soft Skills
- Strong analytical and problem-solving skills
- Excellent communication (verbal & written) for client interaction
- SLA-driven, proactive, detail-oriented
- Mentoring ability (guide L1 Engineer)
Certifications (Preferred)
- Forcepoint DLP Certification (highly preferred)
- Security+ / CEH / CISSP / PCNSE
- AWS/Azure Security certifications (for DSPM)
Senior DLP Engineer L3
Location : Pune
Mode : On site
Experience : 6+ years
Relevant Exp. : 5+ years
Job Summary
We are looking for a Senior DLP Engineer (L3) to lead enterprise DLP architecture, design, implementation, and optimization initiatives. The candidate will provide technical leadership, design security strategies, and manage complex enterprise deployments across on-premises and cloud environments.
Roles & Responsibilities
- Design, architect, and implement enterprise-wide Data Loss Prevention (DLP) solutions to safeguard sensitive organizational data across on-premises and cloud environments.
- Lead the deployment, migration, and optimization of DLP platforms, including Forcepoint DLP, Symantec Endpoint DLP, and Zscaler DLP.
- Develop and enforce advanced DLP policies for Endpoint, Network, Email, Web, and Cloud channels to ensure comprehensive data protection.
- Implement and manage advanced detection technologies such as Exact Data Match (EDM), Indexed Document Matching (IDM), Optical Character Recognition (OCR), document fingerprinting, and advanced content classifiers.
- Conduct DLP architecture reviews, platform health assessments, and performance optimization to maintain secure and resilient environments.
- Integrate DLP solutions with enterprise security technologies, including SIEM, SOAR, CASB, Microsoft Purview, and Identity & Access Management (IAM) platforms.
- Lead the investigation and resolution of critical data security incidents, ensuring timely response and effective containment.
- Perform root cause analysis (RCA) for security incidents and recommend strategic improvements to strengthen the organization's data protection posture.
- Develop and implement automation scripts using PowerShell or Python to streamline DLP administration, monitoring, and reporting.
- Plan and execute platform upgrades, migrations, disaster recovery (DR) testing, and high-availability (HA) implementations to ensure business continuity.
- Provide technical leadership, mentoring, and guidance to L1 and L2 security engineers while driving operational excellence.
- Collaborate with internal stakeholders, auditors, and customers to support security audits, regulatory compliance initiatives, and client engagements.
- Create and maintain technical documentation, standard operating procedures (SOPs), and architecture documentation for DLP solutions.
- Recommend best practices and continuous improvements to enhance enterprise data protection, governance, and compliance frameworks.
Required Skills
- 6+ years of enterprise DLP experience
- Expert-level knowledge of Forcepoint DLP
- Strong experience with Symantec Endpoint DLP
- Strong experience in Zscaler DLP (ZIA)
- Enterprise DLP architecture and implementation
- Endpoint, Network, Email, Cloud, and Web DLP
- Advanced policy design and tuning
- Data classification frameworks
- SIEM/SOAR integration
- Active Directory and Azure AD
- PowerShell and Python automation
- Cloud security (Azure, AWS, Microsoft 365)
- Excellent stakeholder management and leadership skills
Preferred Skills
- Microsoft Purview Information Protection & DLP
- CASB (Defender for Cloud Apps, Netskope, etc.)
- DSPM concepts
- CISSP, CCSP, SC-100, SC-400, or equivalent security certifications
- Experience with regulatory frameworks such as GDPR, HIPAA, PCI DSS, and ISO 27001
Click on Apply to know more.