Cybersecurity Engineer - II / III

JD: Cybersecurity Engineer - (CASB/DLP)

Location: Hyderabad, India (On-site)

Experience: 4 – 8 Years

Reporting to: Director - Cybersecurity

As a Senior CASB & DLP Engineer, you will be the technical lead for our data protection platforms. Your role is to ensure that sensitive company data is identified, monitored, and protected across all cloud services and endpoints. You will be responsible for the end-to-end lifecycle of data protection policies, from initial discovery to automated enforcement.

Core Responsibilities

• Policy Engineering & Implementation
• DLP Rule Development: Design and deploy fine-tuned DLP policies for Email (O365/Gmail), Endpoint, and Network web traffic using Regex, EDM, and IDM.
• CASB Gateway Management: Configure and maintain CASB solutions to secure SaaS applications, focusing on tenant restrictions, activity monitoring, and DLP in the cloud.
• Data Classification: Collaborate with business units to implement data labeling (e.g., Microsoft Purview Information Protection) to ensure automated protection of Highly Confidential assets.
• Technical Operations
• Cloud Discovery: Regularly perform Shadow IT audits to identify unauthorized cloud apps and move them into a sanctioned or blocked state.
• Incident Tuning: Work closely with the SOC to investigate DLP alerts, reducing false positives by refining detection logic and exclusion lists.
• Endpoint Health: Ensure the DLP agent is successfully deployed and functional across the global workstation fleet (Windows/macOS).
• Compliance & Support
• Audit Support: Provide technical evidence for internal and external audits (SOC2, ISO27001) regarding data movement and protection controls.
• End-User Education: Develop Policy Tips and notifications that guide employees on secure data handling practices during their daily workflows.
  
  

Required Skills & Qualifications

• Experience: 4-8 years in Cybersecurity, with at least 3 years of hands-on experience in DLP or CASB administration and implementation.
• Technical Depth: Solid understanding of HTTP, Proxy architectures, and cloud APIs.
• Platforms: Experience with tools such as Netskope, Zscaler, Forcepoint, or Microsoft Purview.
• Education: B.Tech/B.E. in Computer Science or related field. Certifications like Security+, AZ-500, or MS-500 are a plus.