Engineering-L2-Bengaluru-Vice President-Security Engineering

Goldman Sachs; Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Goldman Sachs is seeking a DLP Engineer in Bengaluru to design, implement and tune data loss prevention controls across Microsoft Purview, Zscaler and Proofpoint. You will develop custom detection logic for internal systems, test coverage, and automate triage workflows to reduce manual reviews.

You will also act as the escalation point for complex data leakage incidents and collaborate with data owners, legal and compliance to translate requirements into enforcement rules.

Qualifications

• Proven experience handling data loss incidents and security investigations.
• Hands-on admin experience with Purview, Zscaler, Proofpoint and related tools.
• Ability to interact with REST APIs for logs and automation.

Responsibilities

• Design, implement and continuously tune DLP detection capabilities across Purview, Zscaler, Proofpoint.
• Develop custom detection logic and integrations for internal systems.
• Test and validate existing DLP controls and identify coverage gaps.
• Engineer automation workflows to assist DLP analysts and triage low-fidelity events.
• Act as escalation point for complex data leakage incidents and investigations.
• Collaborate with data owners, legal and compliance to translate requirements into rules.
• Evaluate and integrate additional DLP tools and participate in PoC trials.

Skills

DLP & Security Operations

Core Stack Expertise

Automation & Scripting

Detection Engineering

System Architecture

Tools

Microsoft Purview

Zscaler

Proofpoint

ServiceNow

Job description

• Design, implement and continuously tune DLP detection capabilities and policies across Microsoft Purview, Zscaler, Proofpoint to maximize true positives and minimize operational friction
• Develop custom detection logic and integrations for internally developed systems
• Perform regular testing and validation of existing DLP controls to identify coverage gaps and bypass techniques
• Engineer automation workflows to assist DLP analysts, reducing manual review time and automating the triage of low-fidelity events
• Act as highest-level technical escalation point for complex data leakage incidents and associated investigations
• Collaborate directly with data owners, legal and compliance teams to translate business and regulatory requirements into technical enforcement rules
• Evaluate and integrate additional DLP tools, and participate in proof-of-concept trials.

Key Responsibilities

• Design, implement and continuously tune DLP detection capabilities and policies across Microsoft Purview, Zscaler, Proofpoint to maximize true positives and minimize operational friction
• Develop custom detection logic and integrations for internally developed systems
• Perform regular testing and validation of existing DLP controls to identify coverage gaps and bypass techniques
• Engineer automation workflows to assist DLP analysts, reducing manual review time and automating the triage of low-fidelity events
• Act as highest-level technical escalation point for complex data leakage incidents and associated investigations
• Collaborate directly with data owners, legal and compliance teams to translate business and regulatory requirements into technical enforcement rules
• Evaluate and integrate additional DLP tools, and participate in proof-of-concept trials.

JOB DESCRIPTION

• Design, implement and continuously tune DLP detection capabilities and policies across Microsoft Purview, Zscaler, Proofpoint to maximize true positives and minimize operational friction
• Develop custom detection logic and integrations for internally developed systems
• Perform regular testing and validation of existing DLP controls to identify coverage gaps and bypass techniques
• Engineer automation workflows to assist DLP analysts, reducing manual review time and automating the triage of low-fidelity events
• Act as highest-level technical escalation point for complex data leakage incidents and associated investigations
• Collaborate directly with data owners, legal and compliance teams to translate business and regulatory requirements into technical enforcement rules
• Evaluate and integrate additional DLP tools, and participate in proof-of-concept trials.

Required Technical Skills

• DLP & Security Operations: Proven experience handling data loss incidents, insider threat investigations, or general security incident response. You need to know what a good alert looks like to build one
• Core Stack Expertise: Deep, hands-on administrative experience with tools like Microsoft Purview, Zscaler, ServiceNow and Proofpoint
• Automation & Scripting: Strong proficiency in tools like Python or PowerShell. You must be able to interact with REST APIs to pull logs, enrich alerts, and trigger automated response actions
• Detection Engineering: Proficiency with regular expressions, exact data matching, indexed document matching and custom dictionary creation
• System Architecture: Solid understanding of enterprise network routing, proxies, cloud access, and mail transport rules

What Sets You Apart

• Experience integrating DLP tooling with SOAR platforms (e.g., Splunk SOAR, Cortex XSOAR, Tines) to build end-to-end automated review pipelines
• Background in software engineering or DevSecOps, with an understanding of CI/CD pipelines and version control for managing detection as code
• A “builder” mindset: you prefer to solve problems with code rather than relying solely on out-of-the-box vendor configurations
• Applied AI/ML in Detection Engineering - experience moving beyond static rules by training, tuning and deploying ML classifiers for context-aware data discovery. Familiarity with Microsoft Purview’s Trainable Classifiers or using custom Natural Language Processing models to identify sensitive data types that traditional regex approach misses
• Agentic workflow automation: experience building next-generation, LLM-driven “agentic” workflows. You have moved beyond basic SOAR playbooks and built autonomous systems where AI agents gather contextual telemetry, interact directly with employees (e.g, via MS Teams bots, email, task management systems) to verify business intent, and pre-triage alerts before they are manually reviewed

What We Do

At Goldman Sachs, our Engineers don’t just make things - we make things possible. Change the world by connecting people and capital with ideas. Solve the most challenging and pressing engineering problems for our clients. Join our engineering teams that build massively scalable software and systems, architect low latency infrastructure solutions, proactively guard against cyber threats, and leverage machine learning alongside financial engineering to continuously turn data into action. Create new businesses, transform finance, and explore a world of opportunity at the speed of markets.

Engineering, which is comprised of our Technology Division and global strategists groups, is at the critical center of our business, and our dynamic environment requires innovative strategic thinking and immediate, real solutions. Want to push the limit of digital possibilities? Start here.

Who We Look For

Goldman Sachs Engineers are innovators and problem-solvers, building solutions in risk management, big data, mobile and more. We look for creative collaborators who evolve, adapt to change and thrive in a fast-paced global environment.

About Goldman Sachs

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html

© The Goldman Sachs Group, Inc., 2023. All rights reserved.

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.