DLP Engineer (contract)

Jefferies; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Jefferies is seeking an experienced endpoint security professional to provide administration and operational support for security technologies across the enterprise. You will document design and runbooks, perform regression testing, and align with release management for deployments and upgrades.

You will collaborate with the Security Operations Center on investigations, conduct root-cause analyses, and drive automation to strengthen OS security posture.

Qualifications

• 5 years of hands-on experience with endpoint security technologies.
• Hands-on experience with DLP technologies is a MUST.
• Deep understanding of OS internals and exploit mechanisms with preventive/detective controls.
• Experience investigating security incidents and analyzing logs to identify compromises.
• Scripting capabilities (Python/PowerShell) are highly preferred.
• Knowledge of Splunk search language is preferred.
• Experience creating trends, metrics and management reports.
• Strong interpersonal and communication skills for remote collaboration.

Responsibilities

• Provide administration and operational support for endpoint security technologies.
• Document product details in runbooks, design, and configuration documents.
• Carry out regression testing and analysis for endpoint security.
• Follow release management processes for deployments and upgrades.
• Collaborate with the Security Operations Center during investigations.
• Perform root-cause analysis and implement corrective actions.
• Drive automation to monitor and maintain security posture of OSes.
• Maintain metrics and analytics on system and endpoint security.
• Support EDR and anti-virus tools and strategies.
• Stay current on threats and mitigation strategies.

Skills

Endpoint security

DLP

OS internals

Incident analysis

Log analysis

Communication

Security certifications

Scripting (Python)

Scripting (PowerShell)

Reporting

Education

Bachelor's degree in Technology or related field

Tools

Python

PowerShell

Splunk

Job description

• Provide administration and operational support for endpoint security technologies
• Document all product related details in runbooks, design, and/or configuration documents
• Carry out regression testing and analysis with any endpoint security technologies
• Follow release management processes and best practices for deployment, enhancements, and upgrades.
• Work closely with Security operations center and other security groups during investigations.
• Demonstrate mastery in log file analysis, fault isolation and diagnostic/assessment actions including root cause analysis, followed by the determination and self-directed execution of corrective actions.
• Drive automation efforts to continuously monitor and maintain security posture of operating systems.
• Maintain metrics and supporting analytics on System and endpoint Security.
• Provide secondary assistance and operational support with EDR (Endpoint Detection and Response), Anti-virus solutions
• Stay current on endpoint security best practices, active threats and mitigation strategies.
• Draft & execute the strategy to enhance the investments in current technologies and drive continuous innovation with new ideas to improve and mature endpoint security posture.
• Aggregate data across disparate platforms to design and develop alerting.
• Manage a portfolio of application-related projects and directly manage select projects within that portfolio.

Qualifications:

• 5 years of demonstrable and hands experience with endpoint security technologies
• Hands on experience with DLP technologies is a MUST for this position
• Demonstrated in-depth understanding of operating system (OS) internals, the mechanics of OS exploits with preventive and detective controls
• Demonstrated experience in investigating security incidents with ability to analyze logs to uncover details of the compromise, systems involved, threat techniques etc.
• Experience with scripting like Python, PowerShell etc., is highly preferred
• Knowledge of Splunk search language is preferred.
• Experience in creating trending, metrics, and management reports
• Strong interpersonal & communication skills working with remote peers over IM, phone & video.
• Experience working within the Financial Services Industry preferred
• Demonstrated ability to provide technical directions to other peer staff members, and to train new junior staff members on the security team
• Ability to elicit confidence and build rapport across multiple disciplines.
• Self-motivated; able to learn on own initiative
• Strong skills in organizing workflow, ideas & materials
• Security certifications like Ethical Hacking or other specialized endpoint security certifications are preferred
• B.S in Technology or Related area (proven experience can be used as a substitute