Description

Own DLP detection, alerting, and incident investigation within a global cybersecurity operations team.

This role is hybrid.

Responsibilities

• Review and manage DLP alerts, conducting detailed event investigations.
• Identify ruleset tuning opportunities and communicate technical recommendations.
• Perform root cause analysis to identify attack vectors and indicators of compromise.
• Develop operational runbooks, response processes, and procedures.
• Participate in on-call rotations, including weekends, and internal incident response drills.

Required Skills

• 6+ years of experience in DLP, data classification, or data protection.
• Hands-on experience with SIEM, IDS/IPS, and EDR technologies.
• Proficiency with Unix, Linux, and Windows operating systems.
• Working knowledge of Shell, Bash, or Python scripting.
• Experience in incident management and technical report writing.
• Ability to present technical information to both technical and non-technical audiences.

Preferred Skills

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or equivalent work experience.

Key Skills

Education

Any Graduate