Security Operations Engineer(Data Lose Prevention)

Job Title: Security Operations Engineer II Data Loss Prevention (DLP)Location: Pune (Hybrid mode working)Skills - OC, DLP, Incident Response EngineerYear of Experience - 10-16 YearsSalary - Up to 30LpaNotice period - Immediate joiner /or can join in JanSUMMARY:We are seeking an experienced Data Loss Prevention (DLP) specialist to join our global Cybersecurity Operations and Incident Response team. The DLP-focused Cybersecurity Operations and Incident Response Engineer plays a crucial role in detecting, alerting, and investigating DLP incidents. The ideal candidate will bring extensive expertise in DLP analytics, incident investigation, and management to enhance our teams capabilities in preventing data breaches and protecting sensitive information.Key Responsibilities: Review and manage DLP alerts: Actively monitor and assess alerts to ensure proper response.Conduct DLP event investigations: Investigate incidents and provide escalation management as needed.DLP ruleset tuning: Identify opportunities to improve DLP rules and communicate recommendations to enhance the effectiveness of our defenses.Understand technology infrastructure: Leverage deep technical knowledge of systems and processes to refine incident response strategies.Create operational runbooks: Develop and maintain processes and procedures to respond to incidents efficiently.Conduct root cause analysis: Investigate incidents and determine attack vectors or indicators of compromise.Reporting: Provide written and verbal reports, conveying critical incident details to both technical and non-technical stakeholders.On-call rotation participation: Participate in rotating on-call duties to ensure continuous security operations, including weekends.Incident response exercises: Actively participate in internal exercises and drills to improve preparedness and response times.Experience and Educational Requirements:7+ years of experience in DLP, data classification, data protection, or related cybersecurity fields.Experience with SIEM, IDS/IPS, EDR, and other security technologies.Proficient in Operating Systems: Strong working knowledge of Unix/Linux/Windows systems.Scripting Skills: Experience with Shell/Bash/Python for automation and task management.Communication Skills: Excellent written and verbal communication skills, capable of explaining complex technical concepts to both technical and non-technical audiences.Bachelors Degree in Cybersecurity, Risk Analysis, Computer Science, Information Systems, or other related fields, or equivalent work experience. .