DLP & CASB Engineer

Kyndryl; Dadri; Presencial; INR 1.800.000 - 2.800.000; Jornada completa

Descripción de la vacante

Kyndryl is seeking an experienced DLP & CASB Security Engineer to design, implement, and manage data loss prevention and cloud access security across enterprise environments. The role emphasizes incident handling, policy tuning, and collaboration with SOC and governance teams to improve detections andCompliance.

The engineer will work on integrating DLP/CASB with SIEM, perform RCA for data leakage, and drive continuous improvement through automation and reporting.

Formación

• 5+ years of experience in DLP and CASB technologies.
• Hands-on experience with Forcepoint DLP and Netskope.
• Experience configuring and tuning DLP/CASB policies.
• Knowledge of data classification and compliance standards.

Responsabilidades

• Review and validate DLP/CASB alerts escalated by L1 analysts.
• Investigate data exfiltration incidents across email, cloud, and endpoints.
• Collaborate with SOC and governance stakeholders for policy lifecycle management.
• Tune detection rules to reduce false positives while maintaining coverage.
• Coordinate with OEM vendors for patches and upgrades.
• Prepare monthly dashboards and KPI reports for DLP/CASB operations.

Conocimientos

DLP

CASB

Policy management

SIEM

Incident response

Cloud security

Herramientas

Forcepoint DLP

Netskope DLP

Netskope CASB

Microsoft Defender for Cloud Apps

SIEM integration

Descripción del empleo

Job Posting Title: Data Loss Prevention & Cloud Access Security Broker Engineer

Shift and Schedule: 5 Days Office (Rotational)

Job Description Summary:

The DLP & CASB Engineer is responsible for managing and enhancing the organization’s Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) platforms to protect sensitive data across cloud, email, endpoint, and web channels.

This role combines technical investigation, policy engineering, and platform administration to ensure data protection, regulatory compliance, and effective response to data security incidents.

The engineer will collaborate with SOC teams, platform SMEs, and governance stakeholders to drive continuous improvement in DLP/CASB detections, automation, and policy lifecycle management.

Job Description:

Key Responsibilities:

2. Policy Management & Tuning

3. Platform Operations & Maintenance

4. Governance, Reporting & Compliance

Review, analyze, and validate DLP and CASB alerts escalated by L1 analysts, ensuring accurate triage and risk classification.

Investigate potential cases of data exfiltration, misuse, or policy violations across multiple channels:

Email (O365, Exchange Online Protection, Gmail)

Correlate events across systems (DLP, CASB, SIEM, and EDR) to identify multi-vector data leakage attempts.

Escalate confirmed incidents with detailed context, evidence, and recommended containment actions to L3 SMEs or Incident Response teams.

Participate in Root Cause Analysis (RCA) for confirmed data leakage incidents and propose preventive actions.

Collaborate with DLP/CASB SMEs to fine-tune detection rules, thresholds, and patterns to reduce false positives while maintaining high detection fidelity.

Implement rule and policy changes based on evolving business and regulatory requirements (typically 5-50 changes per month for CASB).

Manage policy lifecycle processes, including testing, deployment, rollback, and documentation.

Contribute to the development of custom detection patterns, data classifiers, and policy templates aligned with organizational data categories (PII, PCI, IP, etc.).

Maintain synchronization and policy consistency across cloud and endpoint channels.

Monitor and ensure operational health and performance of DLP and CASB platforms (e.g., Forcepoint, Netskope, Microsoft Defender for Cloud Apps, Symantec, McAfee, or Palo Alto Prisma Access).

Validate integration with SIEM and ITSM tools (e.g., ServiceNow, Microsoft Sentinel, Splunk) for alert ingestion, incident tracking, and reporting.

Coordinate with OEM vendors and internal platform teams for:

Product patching and upgrades

Performance tuning and incident troubleshooting

Maintain system hygiene, ensuring agents, connectors, and sensors are active and updated across all endpoints and applications.

Conduct periodic configuration reviews to validate coverage, data patterns, and rule logic.

Maintain comprehensive incident logs, RCA records, and policy change documentation.

Support creation of monthly dashboards, SLA reports, and KPI summaries related to DLP/CASB operations.

Participate in governance forums, audit reviews, and client-facing reporting sessions to present performance trends, risk metrics, and improvement plans.

Ensure data protection configurations align with compliance frameworks (e.g., GDPR, HIPAA, PCI DSS, ISO 27001).

Collaborate with risk and compliance teams to align detection and response strategies with corporate data handling policies.

Work closely with L1 monitoring teams, providing guidance on triage, escalation, and classification best practices.

Support cross-skilling initiatives and assist in developing and updating SOPs, knowledge base articles, and training materials.

Participate in threat modelling and data exfiltration use case development to enhance proactive detection and prevention capabilities.

Identify and recommend automation opportunities for incident enrichment, false-positive suppression, and report generation.

Job Qualifications

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a grown mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Job Summary

We are seeking an experienced DLP & CASB Security Engineer with 5+ years of experience in designing, implementing, and managing Data Loss Prevention (DLP) and CASB solutions. The ideal candidate should have hands‑on expertise in Forcepoint DLP, Netskope DLP, and Netskope CASB to protect enterprise data across endpoints, email, web, and cloud environments.

Key Responsibilities

Required Technical and Professional Experience

Preferred Technical and Professional Experience

Implement, administer, and optimize DLP and CASB solutions.

Manage and tune policies in Forcepoint DLP and Netskope DLP.

Configure and support Netskope CASB for cloud application security.

Monitor alerts, investigate incidents, and reduce false positives.

Define and enforce data protection policies (PII, PCI, PHI, etc.).

Work closely with SOC, IT, and cloud teams for incident response and remediation.

Generate reports and maintain compliance documentation.

5+ years of experience in DLP and CASB technologies.

Strong hands‑on experience with Forcepoint DLP and Netskope (DLP & CASB).

Knowledge of data classification, data protection frameworks, and compliance standards.

Experience in policy creation, tuning, and incident handling.

Good understanding of networking, cloud security, and SaaS applications.

Experience integrating DLP/CASB with SIEM tools.

Relevant certifications in Forcepoint or Netskope