Senior Security Analyst -SOC

NopalCyber; Hyderabad; On-site; INR 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Health insurance

Bonuses / performance incentives

Job summary

NopalCyber, Hyderabad-based cybersecurity specialist, seeks a Senior Security Analyst-SOC to manage Data Loss Prevention operations enterprise-wide. You will investigate DLP alerts across cloud, email, endpoint, OT, and removable media, handling incidents from detection to remediation with minimal supervision.

The ideal candidate brings hands-on DLP expertise, strong SIEM skills, and experience tuning policies to align with regulatory and business needs.

Qualifications

• Hands-on experience with DLP platforms and incident response lifecycle.
• Experience implementing and tuning data loss prevention policies across cloud, email, endpoint, and OT environments.

Responsibilities

• Monitor and investigate DLP alerts across cloud, email, endpoint, OT, and removable media.
• Handle end-to-end DLP incidents: triage, investigation, containment, remediation, closure.
• Classify incidents by severity and data sensitivity; escalate per SLAs.
• Correlate DLP findings with identity, endpoint, and cloud telemetry.
• Maintain detailed investigations, timelines, and remediation actions.
• Prepare regular DLP operational reports on alerts, trends, and policy effectiveness.
• Participate in post-incident reviews and continuous improvement.

Skills

DLP

SIEM

Cloud security

Incident response

Data classification

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

Netskope

Microsoft Purview

Forcepoint DLP

Palo Alto Networks DLP

Job description

Seri Lingampally, India | Posted on 05/08/2026

NopalCyber makes cybersecurity manageable, affordable, reliable, and powerful for companies that need to be resilient and compliant. Managed extended detection and response (MXDR), attack surface management (ASM), breach and attack simulation (BAS), and advisory services fortify your cybersecurity across both offense and defense. AI-driven intelligence in our Nopal360° platform, our NopalGo mobile app, and our proprietary Cyber Intelligence Quotient (CIQ) lets anyone quantify, track, and visualize their cybersecurity posture in real-time. Our service packages, which are each tailored to a client’s needs and budget, and external threat analysis, which provides critical intelligence at no-cost, help to democratize cybersecurity by making enterprise-grade defenses and security operations available to organizations of all sizes. NopalCyber lowers the barrier to entry while raising the bar for security and service.

Job Description

Role Overview:

The Senior SecurityAnalyst-SOC is responsible for theend-to-end management of Data Loss Prevention operations across the enterprise.This role focuses on investigating DLP alerts generated across cloud, email,endpoint, OT, and removable media channels, handling DLP incidents from detectionthrough remediation, and ensuring data security policies are effectivelyenforced. The analyst serves as a technical escalation point from L1 andcollaborates closely with the Security Operations Center, Incident Response, Compliance,teams to protect sensitive organizational data from unauthorized access,leakage, or exfiltration.

The ideal candidatebrings deep hands-on expertise with industry-leading DLP platforms anddemonstrates the ability to independently manage the full DLP lifecycle frompolicy creation and tuning to alert investigation, incident response, andstakeholder reporting with minimal supervision.

Key Responsibilities:

• Monitorand investigate DLP alerts across cloud, email, endpoint, OT, and USB/removablemedia channels on a day-to-day basis.
• Performend-to-end DLP incident handling: triage, investigation, root cause analysis,containment, remediation, and closure.
• Classifyincidents by severity and data sensitivity, escalat... critical incidents to theStakeholders or management per defined SLAs
• CorrelateDLP findings with identity, endpoint, and cloud telemetry to establish fullincident context and impact.
• Maintainaccurate, detailed documentation of investigations, timelines, and remediationactions.
• Prepareregular DLP operational reports covering alert volumes, incident trends, falsepositive rates, and policy effectiveness
• Participatein post-incident reviews and contribute to lessons-learned and improvementinitiatives
• Design,create, and refine DLP policies covering cloud (CASB), email, endpoint, andOT/industrial environments.
• Tuneexisting DLP policies to reduce false positives, improve detection accuracy,and align with evolving business requirements
• Maintainand update DLP dictionaries, regular expressions, sensitive data identifiers,and classification rules.
• MonitorDLP platform health, connector status, and policy deployment and tool-related issues.

Required Qualification:

• 4 to 6years of hands-on experience in Data Loss Prevention, Data Security, or arelated cybersecurity operations role.
• Bachelor'sdegree in Cybersecurity, Computer Science, Information Technology, or a relatedfield (or equivalent practical experience)
• Provenexperience of handling DLP alert investigation, incident response, andremediation and policy creation, tuning.
• Hands-onexperience with one or more DLP platforms: Netskope, Microsoft Purview, ForcepointDLP, Palo Alto Networks
• Experiencewith SIEM platforms (Sentinel, Splunk, QRadar) for correlating DLP events withbroader security telemetry.
• Anyvendor-specific DLP certifications (Netskope, Forcepoint, Varonis, Palo Alto)

Core Competencies:

• Deep understanding of cloud, email, endpoint,OT, and removable media DLP mechanisms, detection logic, and coverage gaps.
• Ability to independently create, tune,maintain, and govern DLP policies aligned to regulatory and businessrequirements
• Experience driving DLP incidents end-to-end:from initial detection through containment, user engagement, and formal closure
• Solid grasp of data classification tiers,sensitive data types (PII, PCI, PHI, IP), and their handling obligations
• Ability to correlate data signals acrossmultiple tools and telemetry sources to reconstruct incident timelines andidentify root cause
• Effective communication skills for technicaland non-technical stakeholders
• Ability to work in a 24x7 rotational shiftenvironment