consultant
•5+ years of experience in information security preferably in the areas of incident response, investigations
•Bachelor’s degree from an accredited college/university or equivalent professional experience
•Understanding of Data Loss Prevention
•Experience working with DLP solutions (ZScaler tool, Microsoft Purview and OWL , etc.)
•Familiarity performing packet analysis
Hands on experience & working knowledge of ZScaler tool, Microsoft Purview and OWL (Mandatory)
§We are looking for a of DLP resource with 5+ years of experience for one of our engagements. The resource must work from our Bangalore office and willing to work on shifts
§Candidate must be willing to Work from Office only (Bangalore Location) & willing to do 24x7 rotational shift (Mandatory requirement for this role)
§At least 60 months of experience in information security preferably in the areas of incident response, investigations
§Monitor and respond to alerts generated from the DLP systems and other technologies
§Understand and follow the incident response process through event escalations
§Respond to escalations by the Incident Response Team
§Follow processes to maintain the DLP system
§Utilize Splunk and Symantec DLP to respond to, investigate, triage and prevent client data loss via email and web
§Implement DLP fine-tuning rules/policies via Symantec DLP
§Escalate issues or obstacles that may prevent the execution of daily DLP activities
§Track and present DLP metrics and findings on a monthly basis to senior management
§Recommend process enhancements to improve operational inefficiencies regarding DLP
§A quick learner and adaptable to changing environments
§Have strong analytical skills and communication skills
§Build strong professional working relationships with client personnel
§Working in rotational shifts supporting client environment.
§Deliver timely and high-quality work diligently
§Identify issues and opportunities, and communicate them to appropriate senior member
•Strong knowledge base in operations, enterprise networking, systems evaluation and architecture
•Certifications (e.g., GCIH, CISSP, CCSP) are preferred
•Detailed, control oriented, and thorough
•Previous experience as a member of an Incident Response team is a plus.