DLP Technical Lead-L3

Job description

Introduction
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant, you will be a key advisor for IBM’s clients, analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client's organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities
The Data Security Specialist will play a vital role in safeguarding the organization's sensitive information and preventing data breaches by implementing and maintaining the Data Loss Prevention program. The analyst will be responsible for configuring, monitoring, and managing DLP solutions, conducting regular assessments of data security policies, and collaborating with various teams to ensure data protection and compliance.

Responsibilities
·  Configure the policies to control access to files and also log all changes to the file, including moving or copying the file or changing its content.
·  Configuration of policies / rules / agent deployment on Database servers / node addition in solution console for enforcing access control and proper rights management on databases.
·  Monitoring access to databases, database activities, alerting / blocking unauthorized access/activities.
·  Person will assess the vulnerability of internal assets / devices by conducting vulnerability assessment at defined frequency / ad-hoc basis across internal IP network ranges
·  Person will analyze and document scan findings and recommendations to be included in the Vulnerability Assessment Report.
·  Work closely with the Security Managers, Leadership and other Enterprise IT teams and be the bridge between the various departments.
·  Service Delivery and Operations Support
·  Participate in defining and refining security baselines for our systems.
·  Interact with vendors, researchers, and other 3rd parties to collaborate on security issues or processes.
·  Work with the Team Manager to develop and maintain security Key Performance Indicators.
·  Responsible for tuning various security tools & technologies already in place.
·  Willing to work in 24/7 operations and project support activities

Required Technical and Professional Expertise

·  Proven experience in Data security
·  Sound understanding of security technologies, common security threats and industry best practices
·  Strong Technical Knowledge and Experience in Data Loss Prevention, Data Classification Tool
·  Act as the subject matter expert and system lead for Data Security.
·  Good Experience in Administration of Technologies/Products mentioned below
·  Data Loss Prevention (Symantec / Forcepoint)
·  Data Classification Tool (Titus)
·  Troubleshoot Endpoint security agent (DLP/DCT) software issues.
·  SIEM Event Analysis and manual Co-relation of Events to narrow down the analysis to Threat Vector.
·  Review the SOPs & technical runbooks & also create new SOP documents/runbooks for innovative technologies/process.
·  Experience/Knowledge in Database Activity Monitoring & Seclore is plus.
·  Coordinate and work along with Threat Intel, Incident Response Team and SOC Analysts

Preferred Technical and Professional Expertise

·  One or more security certifications: CEH, Security+, GSEC, GCIH, etc.,
·  You love collaborative environments that use agile methodologies to encourage creative design thinking and find innovative ways to develop with cutting edge technologies
·  Ambitious individual who can work under their own direction towards agreed targets/goals and with creative approach to work
·  Intuitive individual with an ability to manage change and proven time management
·  Proven interpersonal skills while contributing to team effort by accomplishing related results as needed
·  Up-to-date technical knowledge by attending educational workshops, reviewing publications