Data Security Analyst I

Generac Power Systems Inc.; Maharashtra; On-site; INR 900,000 - 1,200,000; Full time

Job summary

Generac Power Systems Inc. is seeking a Data Protection Platform Support specialist to administer Purview and Falcon Data Protection, build and test DLP policies, and monitor health and incidents. You will collaborate with HR, Legal, and IT to ensure privacy and security across endpoints, email, and cloud services.

You will contribute to process improvements, create runbooks, and support governance through metrics and documentation, ensuring compliance and risk mitigation across the organization.

Qualifications

• Bachelor’s degree or equivalent in IT/Cybersecurity/CS or related field.
• 1 year of experience in information security, cybersecurity operations, IT support, or related technical field.
• Experience with data protection concepts and Microsoft security technologies is preferred.
• Familiarity with Microsoft 365 security tools and incident management is helpful.

Responsibilities

• Data Protection Platform Support for Purview & Falcon Data Protection.
• Administer Microsoft & CrowdStrike Falcon Data Protection module.
• Policy setup, testing, rollout, and exception tracking under guidance.
• DLP policy support, testing, tuning across endpoints, email, M365 SaaS, browser, and cloud egress.
• Translate data classification/regulatory requirements into policy rules.
• Participate in test validation and monitor policy results for improvements.
• Insider Risk Monitoring with Purview IRM and Falcon Data Protection.
• Review risk scenarios like data exfiltration and privileged misuse with HR/Legal.
• Triage data protection alerts, document findings, and escalate as needed.
• Prepare recurring reports/metrics on DLP and insider risk activity.
• Coordinate with Cybersecurity, IT, HR, Legal and stakeholders; communicate status clearly.
• Support continuous improvements and automation in data protection processes.

Skills

DLP policies

Microsoft 365

Purview

CrowdStrike Falcon

SIEM tools

Policy testing

Investigation support

Education

Bachelor’s degree in IT/Cybersecurity/CS

Tools

Purview

CrowdStrike Falcon

EDM/Data fingerprinting

SOAR/ticketing systems

Job description

We are Generac, a leading energy technology company committed to powering a smarter world.Over the 60 plus years of Generac’s history, we’ve been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.Major ResponsibilitiesData Protection Platform Support (Purview & Falcon Data Protection)Support the administration of Microsoft and the CrowdStrike Falcon Data Protection moduleAssist with policy setup, testing, rollout activities, exception tracking, and basic platform health monitoring under the guidance of senior team membersMaintain runbooks, standard operating procedures, and internal documentation to support consistent execution of data protection processesDLP Policy Support, Testing & TuningAssist with creating, testing, and updating data loss prevention policies across endpoint, email, M365 SaaS, browser, and cloud egress channelsHelp translate data classification and regulatory requirements into policy rules using available platform capabilities such as sensitive information types, classifiers, Exact Data Match, and document fingerprinting where appropriateParticipate in test validation, monitor policy results, and help identify false positives, exceptions, and opportunities for improvementInsider Risk Monitoring SupportSupport the monitoring and maintenance of insider risk policies in Purview Insider Risk Management and complementary detections in Falcon Data ProtectionAssist in reviewing potential risk scenarios such as data exfiltration, departing employees, privileged user misuse, and repeated policy violationsPartner with HR, Legal, Privacy, and Employee Relations as needed to support case preparation, documentation, and policy validation while following established privacy and escalation guidelinesAlert Triage & Investigation SupportReview and triage data protection alerts and tickets generated by Purview and Falcon Data Protection. Gather relevant details, perform initial analysis, document findings, and escalate higher-risk or more complex issues according to defined proceduresSupport investigations of suspected data loss, insider misuse, and policy violations by collecting evidence from available tools and helping maintain complete, accurate case recordsReporting, Metrics & DocumentationAssist with preparing recurring reports and metrics related to DLP and insider risk activity, including alert volumes, investigation status, policy trends, and identified gapsHelp maintain documentation that supports governance activities, audit readiness, and periodic policy reviewsStakeholder Coordination & CommunicationWork with Cybersecurity, IT teams, system and data owners, HR, Legal, Privacy, and business stakeholders to support data protection activitiesCommunicate clearly regarding open items, required inputs, documentation needs, and status updates, and participate in working sessions and case reviews as assignedContinuous Improvement & Process SupportContribute to ongoing improvements in the enterprise Data Protection Program by identifying process gaps, recommending refinements, and supporting updates to detection logic, triage workflows, and investigation playbooksAssist with automation and AI-enabled process improvements that increase efficiency, consistency, and scalabilityMinimum Job RequirementsEducationBachelor’s Degree in Information Technology, Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent experienceCertification / LicenseWork Experience1 year of experience in information security, cybersecurity operations, IT support, systems administration, compliance, or a related technical fieldExposure to data protection, data loss prevention, Microsoft security technologies, endpoint security, or incident/case management through coursework, lab work, certifications, prior roles, or project experienceExperience supporting alert review, documentation, reporting, policy administration, or investigation-related activities is preferredExperience working with sensitive or confidential information in a professional settingKnowledge / Skills / AbilitiesBasic understanding of information security and data protection concepts, including sensitive data, data classification, common data handling risks, and common exfiltration channels such as email, uploads, removable media, and cloud sharingFamiliarity with Microsoft 365 and foundational awareness of security technologies such as Microsoft Purview, Microsoft Defender, Entra ID, CrowdStrike, SIEM tools, or ticketing systemsAbility to learn new tools, processes, and technical concepts quickly and apply them with guidance in a structured environmentStrong written and verbal communication skills, with the ability to document findings clearly and communicate professionally with technical and non-technical stakeholdersStrong attention to detail, sound judgment, and the ability to handle confidential information with discretionAbility to manage multiple tasks, follow established procedures, and escalate issues appropriatelyBasic experience with reporting, scripting, query languages, or automation tools is helpful but not requiredPreferred Job RequirementsEducationCertification / LicenseMicrosoft SC-401 (Information Security Administrator), SC-200 (Security Operations Analyst), MS-500, CrowdStrike CCFA/CCFR, GIAC GCFA or GCIA, or CIPPWork ExperienceExperience standing up or scaling an insider risk program, including partnership with HR and Legal on sensitive caseworkExposure to regulatory frameworks relevant to data protection (e.g., GDPR, SOX, PCI-DSS) and to privacy-by-design considerations in monitoring programsExperience integrating DLP/IRM workflows with SOAR platforms and ticketing systems to automate triage and case managementKnowledge / Skills / AbilitiesFamiliarity with Exact Data Match (EDM), document fingerprinting, and trainable classifiersExperience with data protection coverage across browser and cloud egress (e.g., Netskope, Zscaler) in addition to endpoint and email channels