Job Type: Contract,Permanent
Work Mode: Hybrid (2 Days from office)
L2 Operations Lead – DLP
Level 2 operations role for data loss prevention services.
Support level
L2 Operations
Domain
Data Loss Prevention
Scope
Microsoft Purview, Microsoft Defender and Symantec Email encryption Service.
Support the client's DLP services. Respond to DLP events & incidents 24x7 and escalate when needed.
Process
• End-to-end incident management including Troubleshoot DLP related issues.
get it resolved or escalate to L3 or further to resolve & close.
• Respond to, analyse and escalate DLP events per SOP, 24x7.
• Support Microsoft Purview and Microsoft Defender (not the administration).
• Report security issues promptly with recommended actions.
• Support Symantec email encryption Service.
• Follow client security standards and guidelines.
• Keep ServiceNow/Purview tickets current, with clear resolution and closure notes.
• Assist Major Incident Manager & join RCA reviews. Update SOPs and knowledge-base articles related to DLP domain.
• Work with Malware Tools, Network Security and IDAM on cross-tower issues.
Tools
• Microsoft Purview
• Microsoft Defender
• Symantec Email encryption Service
• ServiceNow & Purview
Technologies
• DLP policies and event analysis
• Information classification and labelling
• Endpoint agents
• E-mail, web and endpoint data controls
• Python or PowerShell scripting
• AI & Automations
Experience
• 10+ Years of L2 Data Loss Prevention experience
• 24x7 support environment
• Symantec Email encryption Service
• DLP event handling and escalation
• Microsoft Purview & Microsoft Defender
• Handling confidential event data
• ITSM incident, problem and change processes
• Clear written and spoken English
• Working with C-suite personnel
Preferred Certifications
• Symantec Data Loss Prevention Administrator
• Microsoft SC-400