Role : L2 Operations Lead - DLP

Level 2 operations role for data loss prevention services.

Support level:

- L2 Operations

Domain:

- Data Loss Prevention

Scope:

- Microsoft Purview, Microsoft Defender and Symantec Email encryption Service.

- Support the client's DLP services. Respond to DLP events and incidents 24x7 and escalate when needed.

Process:

- End-to-end incident management including troubleshoot DLP related issues.

- Get it resolved or escalate to L3 or further to resolve and close.

- Respond to, analyse and escalate DLP events per SOP, 24x7.

- Support Microsoft Purview and Microsoft Defender (not the administration).

- Report security issues promptly with recommended actions.

- Support Symantec email encryption Service.

- Follow client security standards and guidelines.

- Keep ServiceNow/Purview tickets current, with clear resolution and closure notes.

- Assist Major Incident Manager and join RCA reviews. Update SOPs and knowledge-base articles related to DLP domain.

- Work with Malware Tools, Network Security and IDAM on cross-tower issues.

Tools :

- Microsoft Purview

- Microsoft Defender

- Symantec Email encryption Service

- ServiceNow and Purview

Technologies:

- DLP policies and event analysis

- Information classification and labelling

- Endpoint agents

- E-mail, web and endpoint data controls

- Python or PowerShell scripting

- AI and Automations

Experience:

- 10+ Years of L2 Data Loss Prevention experience

- 24x7 support environment

- Symantec Email encryption Service

- DLP event handling and escalation

- Microsoft Purview and Microsoft Defender

- Handling confidential event data

- ITSM incident, problem and change processes

- Clear written and spoken English

- Working with C-suite personnel

Preferred Certifications:

- Symantec Data Loss Prevention Administrator

- Microsoft SC-400

Location and Shift:

- Need Gurgaon / NCR based candidates only.

- Candidate has to work 2 days from client office and rest 2 days.

- Shift: Rotational