L2 Operations Lead – DLP

TESTQ Technologies LTD.; Gurugram District; Hybrid; INR 1,674,000 - 2,344,000; Full time

Job summary

TESTQ Technologies LTD. seeks an L2 Operations Lead – DLP to manage end-to-end DLP incident response and troubleshooting across email, endpoint, and data loss prevention controls.

You will analyze events, escalate where needed, and ensure alignment with incident handling SOPs while coordinating with cross-functional teams. The role requires strong English communication, experience with ITSM processes, and the ability to work with C-suite stakeholders in a hybrid setup from Gurgaon.

Qualifications

• 10+ years of L2 Data Loss Prevention experience.
• DLP event handling and escalation.
• ITSM incident, problem and change processes.
• Clear written and spoken English.
• Experience working with C-suite personnel.

Responsibilities

• Manage end-to-end DLP incident response and troubleshooting.
• Respond to and escalate DLP events per SOP, 24x7.
• Support Microsoft Purview and Defender configurations (not admin).
• Report security issues with recommended actions.
• Maintain ServiceNow/Purview tickets with clear resolutions and closure notes.
• Collaborate with Malware Tools, Network Security and IDAM on cross-tower issues.

Skills

DLP

Incident handling

English proficiency

C-suite communication

Tools

Python

PowerShell

Job description

TQINE0089_6046 - L2 Operations Lead – DLP

Job Type: Contract,Permanent

Work Mode: Hybrid (3 Days from office)

L2 Operations

Microsoft Purview, Microsoft Defender and Symantec Email encryption Service.

Support the client's DLP services. Respond to DLP events & incidents 24x7 and elevate when needed.

Process

• End-to-end incident management including Troubleshoot DLP related issues.
• Respond to, analyse and escalated DLP events per SOP, 24x7.
• Support Microsoft Purview and Microsoft Defender (not the administration).
• Report security issues promptly with recommended actions.
• Follow client security standards and guidelines.
• Keep ServiceNow/Purview tickets current, with clear resolution and closure notes.
• Assist Major Incident Manager & join RCA reviews. Update SOPs and knowledge-base articles related to DLP domain.
• Work with Malware Tools, Network Security and IDAM on cross-tower issues.

get it resolved or elevate to L3 or further to resolve & close.

Technologies

• DLP policies and event analysis
• Information classification and labelling
• E-mail, web and endpoint data controls
• Python or PowerShell scripting

Experience

• 10+ Years of L2 Data Loss Prevention experience
• DLP event handling and escalation
• ITSM incident, problem and change processes
• Clear written and spoken English
• Working with C-suite personnel