Forcepoint DLP Engineer

Location : Pune

Experience: 36 years in DLP/Security Operations (13 years Forcepoint DLP)

Shift: Business hours with on-call support for critical incidents

Key Responsibilities1. L2 Support & Advanced TroubleshootingProvide Level 2 support for Forcepoint DLP-related incidents escalated from L1.Perform root cause analysis (RCA) for complex incidents: agent failures, policy misconfigurations, false positives/negatives.Troubleshoot TLS/SSL inspection issues, reverse proxy conflicts.Email DLP (Exchange Online, SMTP gateway) issues.Web DLP (HTTP/HTTPS uploads, cloud storage) issues.Resolve application compatibility conflicts across Windows/Mac endpoints.Coordinate with Forcepoint Support for bugs, patches, and hotfixes.2. DLP Policy Management & TuningCreate, implement, and optimize Forcepoint DLP policies based on security requirements.Exact Data Matching (EDM) for structured dataFile Fingerprinting (structured & unstructured) up to 100M filesContent inspection rules, insider threat workflowsReduce false positives while maintaining high detection accuracyValidate policy efficacy regularly and adjust rules based on business feedbackManage Endpoint Classification policies: Custom labels, sensitivity tags, third-party classification integration.Lead response to data leakage incidents and security breaches.Investigate detection, mitigation, and evidence generation for unauthorized access events.Perform single-click remediation: block, encrypt, quarantine, coach users.Document incident timelines, actions taken, and lessons learned.Prepare incident reports for management and compliance audits.4. Platform Maintenance & UpgradesPerform routine system health checks, patch updates, and version upgrades.Execute maintenance windows with minimal service disruption.Restore DLP infrastructure from backups when required.Manage enforcer configurations, agent deployments, and policy synchronization.Monitor system performance (CPU, memory, disk) and optimize as needed.5. DSPM Operations & Data ClassificationAdminister Forcepoint DSPM for data discovery across:Configure DSPM connectors, API integrations, and authenticationReview DSPM classification results and validate AI Mesh technology outputsRemediate risks to sensitive data: access governance, encryption, policy enforcementIntegrate DSPM with DLP for unified data protection (classification tags used by both)6. Integration & AutomationIntegrate Forcepoint DLP/DSPM with enterprise technologies:SIEM: Splunk, QRadar (log forwarding, correlation rules)ITSM: ServiceNow (incident, change, problem management)APIs for automation workflows and custom reportingDevelop scripts (PowerShell/Python) for automation:Agent health checksWork with Threat Intelligence, Network Security, Endpoint Security teams.Provide guidance and mentorship to L1 Engineer.Conduct knowledge sharing sessions on DLP/DSPM best practices.Maintain accurate documentation of configurations, policies, RCA, and incident responses.8. Compliance & Audit SupportAlign DLP/DSPM policies with regulations: GDPR, CCPA, HIPAA, PCI-DSS, ISO 27001Support audit readiness: evidence generation, compliance validation, policy reviewsParticipate in security assessments, gap analysis, and remediation planningEducationB.E./B.Tech in IT/Computer Science or MCA

Experience with DSPM or cloud data security (AWS/Azure/GCP) preferredTechnical SkillsDeep knowledge of Forcepoint DLP (Endpoint, Network, Email, Web, Cloud)Troubleshooting: TLS/SSL, reverse proxies, SMTP, UDP/TCP, XML validationScripting: PowerShell, Python, batch scripting for automationToolsForcepoint Security Manager (FSM) / ONE Data Security portalSIEM (Splunk/QRadar) for log analysis and correlationServiceNow/Jira for ITSM workflowsAPIs for automation (REST API)VPN, remote access tools, packet capture (Wireshark)Soft SkillsStrong analytical and problem-solving skillsExcellent communication (verbal & written) for client interactionSLA-driven, proactive, detail-orientedMentoring ability (guide L1 Engineer)Certifications (Preferred)Forcepoint DLP Certification (highly preferred)Security+ / CEH / CISSP / PCNSEAWS/Azure Security certifications (for DSPM)Location : Pune

Experience : 6+ years

Relevant Exp. : 5+ years

Job SummaryWe are looking for a Senior DLP Engineer (L3) to lead enterprise DLP architecture, design, implementation, and optimization initiatives. The candidate will provide technical leadership, design security strategies, and manage complex enterprise deployments across on-premises and cloud environments.

Design, architect, and implement enterprise-wide Data Loss Prevention (DLP) solutions to safeguard sensitive organizational data across on-premises and cloud environments.Lead the deployment, migration, and optimization of DLP platforms, including Forcepoint DLP, Symantec Endpoint DLP, and Zscaler DLP.Develop and enforce advanced DLP policies for Endpoint, Network, Email, Web, and Cloud channels to ensure comprehensive data protection.Implement and manage .