Data Loss Prevention

About the job
L3 DLP Engineer – Endpoint Security | Forcepoint | Mumbai
Location: Mumbai
Experience: 8–10 Years (Minimum 6 Years in DLP Deployment)
Industry: Cybersecurity / Data Security
Employment Type: Full-Time

Job Overview
We are hiring a highly experienced L3 Data Loss Prevention (DLP) Engineer with strong expertise in endpoint-focused DLP deployments. The candidate must have deep hands-on experience in Forcepoint DLP and exposure to at least one additional enterprise DLP solution.

This role requires deployment ownership, advanced troubleshooting capability, customer-facing maturity, and mentorship of L1/L2 engineers.

Key Responsibilities
• Lead end-to-end DLP deployment and implementation projects.
• Design, configure, and manage endpoint DLP policies.
• Handle advanced troubleshooting and L3 escalations.
• Perform Data Flow Analysis (DFA) for Customers.
• Perform policy tuning and false positive optimization.
• Integrate DLP with:
• Active Directory / LDAP
• Email gateways
• SIEM platforms
• Endpoint security tools
• Manage device control, data classification, and policy lifecycle.
• Prepare technical documentation (HLD/LLD/SOPs).
• Provide mentorship and technical guidance to L1 and L2 engineers.
• Participate in customer discussions and technical reviews.

Required Skills
Mandatory
• Minimum 6 years hands-on experience in DLP deployment and support.
• Strong expertise in Forcepoint DLP (Endpoint & Network modules).
• Experience with at least one additional enterprise DLP solution such as:
• Broadcom (Symantec DLP)
• McAfee DLP
• Digital Guardian DLP
• Strong understanding of:
• Windows OS (Windows 10/11, Windows Server)
• Endpoint agent architecture & troubleshooting
• Policy creation & lifecycle management
• Data classification concepts
• Experience in enterprise-scale deployments.
Experience in performing Data Flow Analysis (DFA)

Preferred / Good to Have
• Exposure to DSPM (Data Security Posture Management) tools.
• Experience in regulated environments (BFSI, Healthcare, IT/ITES).
• Knowledge of Endpoint Security tools such as:
• CrowdStrike Falcon
• Microsoft Defender for Endpoint
• SentinelOne
• Understanding of Zero Trust and modern data protection strategies.
• Basic scripting knowledge (PowerShell/Python) is a plus.

Role Expectations
• This is not a monitoring role.
• Candidate must independently lead deployments.
• Should be dynamic and willing to take ownership of emerging data security technologies beyond DLP.
• Should contribute toward broader endpoint security initiatives including EDR/XDR.

Why Join Us
• Opportunity to lead enterprise DLP deployments.
• Exposure to advanced data security technologies including DSPM.
• Growth into broader endpoint and data security leadership roles.
• Work with enterprise and regulated customers.