Data Security Engineer

3i Infotech Limited; Mumbai Suburban; Presencial; INR 1.200.000 - 2.400.000; Jornada completa

Descripción de la vacante

3i Infotech Limited is seeking a Data Security Engineer with hands-on Forcepoint DLP (Web, Endpoint, Email) and DSPM experience to manage enterprise data protection controls and incident response. The role covers DLP policy tuning, DSPM operations, and governance across cloud and on-prem systems.

You will integrate security tools with SIEM/SOAR, support audits, and develop runbooks while ensuring compliance with data protection standards.

Formación

• Hands-on experience with Forcepoint DLP across Endpoint, Web and Email.
• Proven experience with Forcepoint DSPM and data protection platforms.
• Strong understanding of DLP, DSPM, data classification and data governance.
• Experience integrating security tools with SIEM/SOAR and cloud platforms.
• Ability to design runbooks, playbooks and incident response SOPs.

Responsabilidades

• Administer and support Forcepoint DLP across Endpoint, Web and Email.
• Monitor incidents, investigate alerts, triage and drive remediation.
• Configure and tune DLP policies for PII, PCI, PHI, IP, source code and sensitive data.
• Manage endpoint controls (USB, printing, clipboard, tagging).
• Support Email DLP, Web DLP, CASB integrations and cloud protections.
• Policy tuning, exception management and reducing false positives.
• Integrate Forcepoint DLP with SIEM, SOAR, IAM, MDM, EDR and ticketing systems.
• Support audits, eDiscovery and investigations; prepare dashboards and KPIs.
• DSPM operations: scanning, monitoring, alerting and risk remediation.
• Investigate DSPM findings: data exposure, sprawl, misconfigurations, excessive access.
• Manage connectors: M365, SharePoint Online, AWS, S3, databases, endpoints, Entra ID.
• Build automation workflows using APIs, Webhooks, ServiceNow, Jira, SIEM and SOAR.
• Drive remediation via data classification, encryption and least-privilege controls.
• Develop SOPs, playbooks and runbooks for data security incidents.

Conocimientos

Forcepoint DLP

Forcepoint DSPM

DLP concepts

DSPM concepts

Data classification

Data governance

Insider threat mgmt

Security monitoring

Incident response

APIs & automation

Webhook integrations

Herramientas

Microsoft Sentinel

Splunk

ServiceNow

SOAR Platforms

Descripción del empleo

Job Summary

We are seeking a skilled Data Security Engineer with hands-on experience in Forcepoint DLP and DSPM (Data Security Posture Management) platforms. The ideal candidate will be responsible for managing enterprise data protection controls, monitoring and responding to data security incidents, implementing DLP policies, managing DSPM operations, and ensuring compliance with data protection regulations and industry standards.

The role requires strong expertise in Forcepoint DLP (Web, Endpoint, and Email), cloud security integrations, data classification, incident management, and data governance initiatives.

Key Responsibilities

Data Loss Prevention (DLP)

• Administer and support Forcepoint DLP across Endpoint, Web, and Email channels.
• Monitor DLP incidents, investigate alerts, perform triage, and drive remediation activities.
• Configure and fine-tune DLP policies for:
• Personally Identifiable Information (PII)
• Payment Card Information (PCI)
• Protected Health Information (PHI)
• Intellectual Property (IP)
• Source Code
• Custom Sensitive Data
• Manage endpoint controls including USB restrictions, print controls, clipboard monitoring, and file tagging.
• Support Email DLP, Web DLP, CASB integrations, and cloud data protection initiatives.
• Perform policy tuning, exception management, false-positive reduction, and user awareness activities.
• Integrate Forcepoint DLP with SIEM, SOAR, IAM, MDM, EDR, ticketing systems, and cloud platforms.
• Support audits, compliance reviews, eDiscovery requests, and security investigations.
• Prepare operational dashboards, KPI/KRI reporting, and executive summaries.

Data Security Posture Management (DSPM)

• Manage day-to-day Forcepoint DSPM operations including scanning, monitoring, alert management, and risk remediation.
• Investigate and respond to DSPM findings related to:
• Sensitive data exposure
• Data sprawl
• Public sharing risks
• Misconfigurations
• Excessive access privileges
• Implement and manage connectors with:
• Microsoft 365
• SharePoint Online
• AWS
• S3 Buckets
• Databases
• Endpoints
• Entra ID
• Build automation workflows using APIs, Webhooks, ServiceNow, Jira, SOAR, and SIEM tools.
• Drive remediation activities through data classification, encryption, least-privilege access, and governance controls.
• Develop SOPs, playbooks, and operational runbooks for data security incidents.

Required Skills

Mandatory Skills

• Strong hands-on experience with Forcepoint DLP (Web, Endpoint & Email).
• Experience working with Forcepoint DSPM.
• Good understanding of:
• Data Loss Prevention (DLP)
• Data Security Posture Management (DSPM)
• Data Classification & Data Governance
• Insider Threat Management
• Experience with security monitoring, incident response, and remediation.
• Hands-on experience integrating security solutions with:
• Microsoft Sentinel
• Splunk
• ServiceNow
• SOAR Platforms
• Experience with:
• Microsoft 365
• Exchange Online
• SharePoint
• AWS
• S3
• Entra ID
• Knowledge of cloud security, CASB, endpoint security, and data protection technologies.
• Experience with APIs, scripting, automation, and webhook integrations.
• Strong analytical, troubleshooting, and reporting skills.

Preferred Skills

• Experience in SOC, Cyber Security Operations, or Enterprise Data Security environments.
• Exposure to insider risk management and security governance programs.
• Knowledge of GenAI security controls and SaaS security platforms.
• Experience managing large-scale enterprise DLP deployments.
• Vendor management and stakeholder communication experience.