Security Engineer - Data Protection

eSec Forte Technologies; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Health insurance

Certification reimbursement

Learning allowance

Conference / training access

Flexible work arrangements

Job summary

eSec Forte is seeking a Security Engineer - Data Protection in Gurugram to design, implement, and manage DLP and DSPM solutions across endpoints, networks, and cloud environments. You will craft data protection policies, manage email security platforms, and coordinate with IT and compliance teams to embed secure data handling practices.

The role requires 2–4 years of relevant experience, a CS/IT degree, and strong knowledge of DLP, DSPM, regex policies, and GDPR/CCPA compliance.

Qualifications

• 2–4 years in security engineering with focus on data protection or email security.
• Degree in CS/IT or closely related field.
• Hands-on with DLP/DSPM principles and architectures.
• Experience with enterprise Email Security/DLP platforms.
• Proficiency in advanced policy development and incident handling.
• Knowledge of data privacy regulations (GDPR, CCPA).

Responsibilities

• Design, implement, and maintain DLP and DSPM across endpoints, networks, and cloud.
• Develop and fine-tune data protection policies and regex-based logic.
• Manage email security and DLP platforms (Proofpoint, Mimecast, Forcepoint).
• Lead or participate in end-to-end DLP implementation projects.
• Monitor, triage, and respond to data security incidents and alerts.
• Collaborate with IT/compliance/business teams to embed protection controls.
• Review and tune DLP policies to reduce false positives and adapt to threats.
• Provide expert guidance on data protection technologies.

Skills

DLP/ DSPM

Email security

Regex policy development

Incident handling

Data classification

Regulatory compliance

End-to-end implementation

Education

B.Tech or BCA in CS/IT

Tools

Proofpoint

Mimecast

Forcepoint

SIEM

Cloud platforms (AWS/Azure/GCP)

Job description

About the Role

The Security Engineer - Data Protection will be instrumental in safeguarding sensitive information by implementing, configuring, and managing advanced data loss prevention (DLP) and data security posture management (DSPM) solutions. This role involves developing robust data protection strategies, ensuring compliance with organizational policies, and actively responding to data security incidents across diverse enterprise environments.

Key Responsibilities

• Design, implement, and maintain comprehensive Data Loss Prevention (DLP) and Data Security Posture Management (DSPM) solutions across endpoints, networks, and cloud environments.
• Develop, deploy, and fine-tune data protection policies, rules, and logic for DLP platforms, including crafting complex regular expressions for pattern and document matching.
• Manage and operate leading email security and Email DLP platforms such as Proofpoint, Mimecast, and Forcepoint, ensuring effective prevention of data exfiltration and enforcement of communication policies.
• Lead or actively participate in end-to‑end implementation projects for DLP solutions, encompassing requirements gathering, architecture design, deployment, and post-implementation optimization.
• Monitor, analyze, and triage data security incidents and alerts generated by DLP, DSPM, and email security systems, initiating appropriate response actions.
• Collaborate closely with internal IT, compliance, and business teams to integrate data protection controls into existing infrastructure and develop secure data handling processes.
• Conduct regular reviews and performance tuning of DLP policies and configurations to minimize false positives, enhance detection accuracy, and adapt to evolving threat landscapes.
• Provide expert technical support and guidance on data protection technologies, ensuring their optimal performance, availability, and alignment with security objectives.

Requirements

• 2-4 years of direct experience in a security engineering role with a primary focus on data protection, data loss prevention (DLP), or email security.
• B.Tech or BCA degree in Computer Science, Information Technology, or a closely related technical field.
• Demonstrated expertise in Data Loss Prevention (DLP) and Data Security Posture Management (DSPM) principles, architectures and implementation methodologies.
• Proven hands‑on experience with the implementation, configuration, and day‑to‑day operational management of enterprise‑grade Email Security and Email DLP solutions.
• Proficiency in operating and managing platforms such as Proofpoint, Mimecast, and Forcepoint, including advanced policy development, incident handling, reporting, and system tuning.
• Strong ability to develop and implement complex data protection policies, including advanced knowledge and practical application of regular expressions for content, context and pattern-based inspection.
• Documented experience in at least one end‑to‑end implementation of a major DLP platform, covering scoping, deployment, policy creation, and ongoing optimization.
• Solid understanding of data classification schemes, data privacy regulations (e.g., GDPR, CCPA), and relevant compliance frameworks to inform policy design.

Nice-to-Have

• Practical experience with Endpoint Detection and Response (EDR) or Extended Detection and Response (XDR) platforms.
• Familiarity with Security Information and Event Management (SIEM) systems for security event correlation and analysis.
• Understanding of cloud security principles and experience with data protection in cloud environments (e.g., AWS, Azure, GCP).
• Relevant industry certifications such as GIAC GDAT, CCSK, or CDPSE.

Benefits

• Health insurance for the employee and dependents
• Professional security-certification reimbursement (e.g., GIAC GDAT, CCSK, CDPSE)
• Annual learning and skill-development allowance
• Sponsored conference / training attendance
• Flexible work arrangements