About this role
•5 + years of experience in information security preferably in the areas of incident response, investigations
• Bachelor’s degree from an accredited college/university or equivalent professional experience
• Understanding of Data Loss Prevention
• Experience working with DLP solutions (ZScaler tool, Microsoft Purview and OWL , etc.)
• Familiarity performing packet analysis
At least 60 months of experience in information security preferably in the areas of incident response, investigations
▪ Monitor and respond to alerts generated from the DLP systems and other technologies
▪ Understand and follow the incident response process through event escalations
▪ Respond to escalations by the Incident Response Team
▪ Follow processes to maintain the DLP system
▪ Utilize Splunk and Symantec DLP to respond to, investigate, triage and prevent client data loss via email and web
▪ Implement DLP fine-tuning rules/policies via Symantec DLP
▪ Escalate issues or obstacles that may prevent the execution of daily DLP activities
▪ Track and present DLP metrics and findings on a monthly basis to senior management
▪ Recommend process enhancements to improve operational inefficiencies regarding DLP
▪ A quick learner and adaptable to changing environments
▪ Have strong analytical skills and communication skills
▪ Build strong professional working relationships with client personnel
▪ Working in rotational shifts supporting client environment.
▪ Deliver timely and high-quality work diligently
▪ Identify issues and opportunities, and communicate them to appropriate senior member
• Strong knowledge base in operations, enterprise networking, systems evaluation and architecture
• Certifications (e.g., GCIH, CISSP, CCSP) are preferred
• Detailed, control oriented, and thorough
• Previous experience as a member of an Incident Response team is a plus.