About this role
1-2 years of experience in information security preferably in the areas of incident response, investigations • Bachelor’s degree from an accredited college/university or equivalent professional experience • Understanding of Data Loss Prevention • Experience working with DLP solutions (ZScaler tool, Microsoft Purview and OWL , etc.) • Familiarity performing packet analysis
Hands on experience & working knowledge of ZScaler tool, Microsoft Purview and OWL (Mandatory)
§ Monitor and respond to alerts generated from the DLP systems and other technologies § Understand and follow the incident response process through event escalations § Respond to escalations by the Incident Response Team § Follow processes to maintain the DLP system § Utilize Splunk and Symantec DLP to respond to, investigate, triage and prevent client data loss via email and web § Implement DLP fine-tuning rules/policies via Symantec DLP § Escalate issues or obstacles that may prevent the execution of daily DLP activities § Track and present DLP metrics and findings on a monthly basis to senior management § Recommend process enhancements to improve operational inefficiencies regarding DLP § A quick learner and adaptable to changing environments § Have strong analytical skills and communication skills § Build strong professional working relationships with client personnel § Working in rotational shifts supporting client environment. § Deliver timely and high-quality work diligently § Identify issues and opportunities, and communicate them to appropriate senior member • Strong knowledge base in operations, enterprise networking, systems evaluation and architecture • Certifications (e.g., GCIH, CISSP, CCSP) are preferred • Detailed, control oriented, and thorough • Previous experience as a member of an Incident Response team is a plus