Specialist

HCLTech; Chennai District; On-site; INR 15,00,000 - 20,00,000; Full time

Job summary

A leading technology firm in Chennai is seeking an experienced L3 Data and Cloud Security Specialist to oversee PKI, DLP, and CASB initiatives. The ideal candidate will manage data security policies and drive security awareness training. Applicants should have over 8 years of relevant experience, with certifications preferred, and should be familiar with several key security tools. This role offers opportunities for team leadership and skill development.

Qualifications

• 8+ years of experience in data security.
• Hands-on expertise in ADCS, Venafi, DigiCert, Purview DLP, Trellix DLP, Netskope DLP/CASB, and MDCA.
• Certifications preferred: MCSE, SC-200, Trellix DLP, Netskope Certified Cloud Security Administrator (NCCSA), CompTIA Security+.

Responsibilities

• Administer and troubleshoot enterprise PKI infrastructure.
• Design, implement, and fine-tune DLP policies.
• Deploy, manage, and optimize Microsoft Defender for Cloud Apps.
• Administer phishing simulation and security awareness training.
• Lead and mentor L1/L2 teams.

Skills

Public Key Infrastructure (PKI)

Data Loss Prevention (DLP)

Cloud Access Security Broker (CASB)

Security Awareness Training

Scripting in PowerShell/Python

Education

Certifications such as MCSE, SC-200

Tools

Microsoft Defender for Cloud Apps

Netskope

ZenGuide

Venafi

DigiCert

Job description

Job Description: L3 Data and cloud Security specialist – PKI, DLP, CASB, Security Awareness

Position Overview

As a L3 Data Security Engineer with expertise in Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), and Security Awareness programs.

Key Responsibilities

• PKI (ADCS, Venafi, DigiCert): Administer and troubleshoot enterprise PKI infrastructure including Microsoft ADCS. Manage certificate lifecycle: issuance, renewal, revocation, and CRL/OCSP validation. Integrate Venafi for certificate automation and orchestration across multi-cloud/hybrid environments. Manage external SSL/TLS certificates with DigiCert, including domain validation and SAN/Wildcard certs. Perform PKI health checks, vulnerability remediation, and root/intermediate CA maintenance. Define and implement certificate governance and key management best practices.
• Data Loss Prevention (DLP) – Microsoft Purview, Trellix, Netskope: Design, implement, and fine-tune DLP policies across endpoint, email, and cloud channels. Manage Microsoft Purview DLP including sensitive information types, EDMs, and trainable classifiers. Operate Trellix (McAfee) and Netskope DLP for endpoint and policy enforcement. Lead false positive tuning, incident analysis, and cross-platform correlation.
• Cloud Access Security Broker (CASB) – Defender for Cloud Apps, Netskope: Deploy, manage, and optimize Microsoft Defender for Cloud Apps (MDCA) for SaaS discovery, OAuth app governance, and conditional access enforcement. Operate Netskope CASB for inline and API mode enforcement. Implement shadow IT discovery, sanctioned app policies, and anomaly detection.
• Security Awareness & Compliance: Administer and manage Phishing Simulation and Security Awareness Training using ZenGuide (PSAT) and Mimecast platforms. Design and execute quarterly training programs and phishing campaigns to evaluate and improve user security behavior. Analyze campaign outcomes and prepare monthly and quarterly reports on user behavior trends, risk scoring, and training effectiveness for customer stakeholders.

Team Management

Lead and mentor L1/L2 teams, providing guidance, technical escalation support, and task prioritization. Ensure 24x7 operational coverage for shared services customers by managing rosters, delegations, and escalations. Collaborate with management to plan skill development, cross-skilling, and performance improvements. Drive process improvements and automation to enhance efficiency.

Core Competencies

• Strong expertise in PKI lifecycle management, CA hierarchy, and certificate automation.
• In-depth knowledge of DLP architecture (endpoint, network, cloud) and policy tuning.
• Hands-on experience with CASB solutions (MDCA, Netskope) and cloud security governance.
• Proven ability to analyze incidents, troubleshoot complex integrations, and optimize policies.
• Scripting and automation skills using PowerShell, Python, or API integrations for repetitive tasks.
• Understanding of compliance frameworks (ISO 27001, GDPR, HIPAA, PCI-DSS).

Qualifications & Experience

8+ years of experience in data security. Hands-on expertise in ADCS, Venafi, DigiCert, Purview DLP, Trellix DLP, Netskope DLP/CASB, and MDCA. Certifications preferred MCSE, SC-200, Trellix DLP, Netskope Certified Cloud Security Administrator (NCCSA), CompTIA Security+.