Cybersecurity-NxxT
Website:
cybersecurity-nxxt.com
Job details:
Job Title : Security Engineer - Symantec DLP
Job Type: FTE
Location : Remote, India
Job Summary:
We are seeking a highly skilled L3 Data & Cloud Security Engineer. You will act as the highest technical escalation point (Subject Matter Expert) for our comprehensive data protection ecosystem. Your primary focus will center on Symantec Data Loss Prevention (DLP) across endpoint, network, email, and discovery modules. Additionally, you will drive architecture and advanced engineering for our Secure Access Service Edge (Netskope SASE) and cloud governance infrastructure (Palo Alto Prisma Cloud - CNAPP/CSPM). You will be responsible for resolving critical infrastructure issues, designing data security controls, and engineering zero-trust data protection workflows.
Key Responsibilities:
1. L3 Engineering & Administration: Symantec DLP
- Escalation Support: Serve as the ultimate authority for complex troubleshooting, performance optimization, and root-cause analysis (RCA) of the Symantec DLP platform.
- Architecture & Lifecycle: Lead high-level design (HLD), low-level design (LLD), system upgrades, major migrations, and zero-downtime maintenance for Enforce servers, detection servers, and endpoint agents.
- Policy Optimization: Design, implement, and tune complex detection mechanisms (EDM, IDM, custom regex, vector machine learning) to maximize detection precision and minimize false positives.
- Data Discovery: Direct and configure Symantec Network Discover scans against massive enterprise data repositories (databases, file shares, SharePoint). [
2. SASE & Data-in-Motion Security: Netskope
- SASE/CASB Delivery: Architect and optimize Next-Gen Secure Web Gateway (NG-SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA) solutions.
- Traffic Inspection: Configure and debug advanced SSL/TLS decryption policies, PAC files, and reverse proxy rules without impacting business continuity.
- Unified Protection: Synchronize Netskope cloud data protection rules with on-premise Symantec DLP logic to achieve a cohesive, multi-channel data defense posture.
3. Cloud-Native Security Posture Management: Palo Alto Prisma Cloud
- CNAPP & CSPM Implementation: Own the operational lifecycle of Prisma Cloud to govern security posture across multi-cloud environments (AWS, Azure, GCP).
- Compliance & Guardrails: Write, modify, and implement continuous compliance policies mapped to regulatory frameworks like GDPR, HIPAA, and PCI-DSS.
- Vulnerability & Shift-Left: Integrate security checks into DevSecOps workflows, including container security (Kubernetes/Docker) and Infrastructure as Code (IaC) scanning via Terraform.
- Automated Remediation: Program and deploy automated remediation scripts using Python and custom query languages to rapidly fix cloud misconfigurations.
4. Governance, Mentorship & Collaboration
- Operational Handover: Author detailed SOPs, operational runbooks, and implementation guides for the broader IT operations pipeline.
- Team Leadership: Mentor and provide technical direction to Level 1 and Level 2 security engineers.
- Vendor Management: Liaise with OEM technical assistance centers (Broadcom/Symantec, Netskope, Palo Alto TAC) to address critical zero-day issues or product bugs.
Required Qualifications & Technical Skills:
- Experience: 8+ years of hands-on experience in Information Security, with at least 3–5 years acting as a dedicated L3 engineer for Symantec DLP or enterprise data protection platforms.
- Symantec DLP Mastery: Deep architectural knowledge of Symantec Enforce architecture, network prevent (web/email), endpoint prevent, and integration with encryption tools.
- Cloud & SASE Expertise: Proven track record in configuring Netskope tenants (steering configurations, tenant restrictions) and integrating Palo Alto Prisma Cloud with API-based cloud structures.
- Infrastructure Knowledge: Strong foundation in Active Directory/Entra ID, networking protocols (TCP/IP, DNS, HTTP/HTTPS, BGP), and cloud-native fabrics.
- Automation & Querying: Proficiency with scripting languages (Python, PowerShell) and data/policy definitions (Regex, JSON, SQL).
- Education: Bachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent practical experience.
Preferred Certifications:
- Broadcom Certified Specialist: Symantec Data Loss Prevention
- Netskope Cloud Security Professional (NCSP) or Integrator (NCSI)
- Palo Alto Networks Certified Network Security Engineer (PCNSE) or Prisma Cloud Certified Professional (PCCSE)
Click on Apply to know more.