Senior Security Analyst -SOC

NopalCyber
Posted on
NopalCyber logo

Experience
4 - 6 yrs
Job Location
Hyderabad, India
Vacancy
1
Designation
Senior Security Analyst
Job Type
Not specified

Job Description

< p> ":"< span> < div> < span> < span> < b> Role Overview: < br> < div> < span> < span> < br> < p> < span> < span> < span> The Senior Security Analyst-SOC < span> < span> < span> < span> < span> is responsible for the end-to-end management of Data Loss Prevention operations across the enterprise. This role focuses on investigating DLP alerts generated across cloud, email, endpoint, OT, and removable media channels, handling DLP incidents from detection through remediation, and ensuring data security policies are effectively enforced. The analyst serves as a technical escalation point from L1 and collaborates closely with the Security Operations Center, Incident Response, Compliance, teams to protect sensitive organizational data from unauthorized access, leakage, or exfiltration. < span> < span> < br> < p> < span> < span> < span> The ideal candidate brings deep hands-on expertise with industry-leading DLP platforms and demonstrates the ability to independently manage the full DLP lifecycle from policy creation and tuning to alert investigation, incident response, and stakeholder reporting with minimal supervision. < span> < span> < br> < div> < span> < span> < br> < div> < span> < span> < span> < b> Key Responsibilities: < span> < span> < br> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Monitor and investigate DLP alerts across cloud, email, endpoint, OT, and USB/removable media channels on a day-to-day basis. < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Perform end-to-end DLP incident handling: triage, investigation, root cause analysis, containment, remediation, and closure. < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Classify incidents by severity and data sensitivity, escalate critical incidents to the Stakeholders or management per defined SLAs < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Correlate DLP findings with identity, endpoint, and cloud telemetry to establish full incident context and impact. < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Maintain accurate, detailed documentation of investigations, timelines, and remediation actions. < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Prepare regular DLP operational reports covering alert volumes, incident trends, false positive rates, and policy effectiveness < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Participate in post-incident reviews and contribute to lessons-learned and improvement initiatives < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Design, create, and refine DLP policies covering cloud (CASB), email, endpoint, and OT/industrial environments. < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Tune existing DLP policies to reduce false positives, improve detection accuracy, and align with evolving business requirements < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Maintain and update DLP dictionaries, regular expressions, sensitive data identifiers, and classification rules. < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Monitor DLP platform health, connector status, and policy deployment and tool-related issues. < span> < span> < br> < div> < span> < span> < br> < div> < span> < span> < b> Required Qualification: < span> < br> < div> < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> 4 to 6 years of hands-on experience in Data Loss Prevention, Data Security, or a related cybersecurity operations role. < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Bachelors degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience) < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Proven experience of handling DLP alert investigation, incident response, and remediation and policy creation, tuning. < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Hands-on experience with one or more DLP platforms: Netskope, Microsoft Purview, Forcepoint DLP, Palo Alto Networks < span> < span> < br> < p> < span> < span> < span> < span> < span> < span> < span> < span> < span> < span> Experience with SIEM platforms (Sentinel, Splunk, QRadar) for correlating DLP events with broader security telemetry. < span> < span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /div> < /span> < /b> < /span> < /span> < /div> < /span> < /span> < /div> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /b> < /span> < /span> < /span> < /div> < /span> < /span> < /div> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /span> < /p> < /span> < /span> < /div> < /b> < /span> < /span> < /div> < /span> < /p> Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

No Referrers Available

There are currently no referrers available for this job. You can still apply, will let you know once there is any referrer available.