Sr Security DAP

Technogen; Hyderabad; On-site; INR 1,400,000 - 2,800,000; Full time

Job summary

Technogen in Hyderabad is seeking a senior security professional specializing in DLP and insider threat management across endpoint, email, network and cloud environments. You will tune policies, craft rules, reduce false positives, and integrate DLP/insider threat with SIEM and SOAR, collaborating with global teams.

A background in data classification, privacy frameworks (GDPR/CCPA/ISO 27001) and scripting (Python/PowerShell) is highly valued.

Qualifications

• Extensive experience in security engineering, data protection or insider threat ops in enterprise environments.
• Hands-on DLP and insider threat monitoring across endpoint, email, network and cloud.
• Deep understanding of data classification, handling, and access control models across enterprise ecosystems.
• Experience analyzing user activity and data movement to detect anomalous or risky behavior.
• Proficiency integrating DLP/insider threat with SIEM, SOAR, and cloud platforms for visibility and automation.
• Strong knowledge of endpoint, network, and cloud DLP technologies and best practices.
• Experience in policy tuning, rule creation, and reducing false positives.
• Familiarity with scripting and automation (Python, PowerShell, or equivalent).
• Working knowledge of privacy and regulatory frameworks including GDPR, CCPA, and ISO 27001.
• Excellent analytical, investigative, and communication skills, with the ability to collaborate across global teams.

Responsibilities

• Design and operate DLP and insider threat programs across enterprise environments.
• Tune policies, craft rules, and reduce false positives in DLP systems.
• Integrate DLP/insider threat with SIEM, SOAR, and cloud platforms for enhanced visibility.
• Collaborate with global, cross-functional teams to improve data protection posture.

Skills

Security engineering

Data protection

Insider threat operations

Anomaly detection

Automation

Policy tuning

Scripting (Python)

Regulatory knowledge

Collaboration across teams

Education

Bachelor's degree in Cybersecurity / CS / IT

Tools

SIEM

SOAR

DLP platforms

CASB

Cloud security tools

PowerShell

Python

Job description

• 57+ years of experience in security engineering, data protection, or insider threat operations within enterprise environments.
• Hands-on experience implementing and managing DLP and insider threat monitoring platforms (endpoint, email, network, and cloud-based).
• Deep understanding of data classification, handling, and access control models across enterprise ecosystems.
• Experience analyzing user activity and data movement to detect anomalous or risky behavior.
• Proficiency in integrating DLP and insider threat technologies with SIEM, SOAR, and cloud platforms for enhanced visibility and automation.
• Strong knowledge of endpoint, network, and cloud DLP technologies and best practices for data security enforcement.
• Experience in policy tuning, rule creation, and reducing false positives within DLP and insider threat systems.
• Familiarity with scripting and automation (Python, PowerShell, or equivalent) for policy management and workflow optimization.
• Working knowledge of privacy and regulatory frameworks including GDPR, CCPA, and ISO 27001.
• Excellent analytical, investigative, and communication skills, with the ability to collaborate across global, cross-functional teams.

Preferred:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field (or equivalent practical experience).
• Certifications such as GCITP, CCITP, CDPSE, or equivalent credentials in data protection or insider threat management.
• Experience with insider threat frameworks and behavioral analytics tools supporting large enterprise environments.
• Familiarity with CASB, DLP-as-a-Service, and cloud security solutions (Microsoft 365, Google Workspace, or equivalent).
• Knowledge of the MITRE ATT&CK framework for insider threat and data exfiltration scenarios.
• Experience conducting forensic investigations related to insider threats, data leakage, or intellectual property protection.