Data Security Engineer

Job Summary

We are seeking a skilled Data Security Engineer with hands-on experience in Forcepoint DLP and DSPM (Data Security Posture Management) platforms. The ideal candidate will be responsible for managing enterprise data protection controls, monitoring and responding to data security incidents, implementing DLP policies, managing DSPM operations, and ensuring compliance with data protection regulations and industry standards.

The role requires strong expertise in Forcepoint DLP (Web, Endpoint, and Email), cloud security integrations, data classification, incident management, and data governance initiatives.

Key Responsibilities

Data Loss Prevention (DLP)

• Administer and support Forcepoint DLP across Endpoint, Web, and Email channels.
• Monitor DLP incidents, investigate alerts, perform triage, and drive remediation activities.
• Configure and fine-tune DLP policies for:
• Personally Identifiable Information (PII)
• Payment Card Information (PCI)
• Protected Health Information (PHI)
• Intellectual Property (IP)
• Source Code
• Custom Sensitive Data
• Manage endpoint controls including USB restrictions, print controls, clipboard monitoring, and file tagging.
• Support Email DLP, Web DLP, CASB integrations, and cloud data protection initiatives.
• Perform policy tuning, exception management, false-positive reduction, and user awareness activities.
• Integrate Forcepoint DLP with SIEM, SOAR, IAM, MDM, EDR, ticketing systems, and cloud platforms.
• Support audits, compliance reviews, eDiscovery requests, and security investigations.
• Prepare operational dashboards, KPI/KRI reporting, and executive summaries.

Data Security Posture Management (DSPM)

• Manage day-to-day Forcepoint DSPM operations including scanning, monitoring, alert management, and risk remediation.
• Investigate and respond to DSPM findings related to:
• Sensitive data exposure
• Data sprawl
• Public sharing risks
• Misconfigurations
• Excessive access privileges
• Implement and manage connectors with:
• Microsoft 365
• SharePoint Online
• AWS
• S3 Buckets
• Databases
• Endpoints
• Entra ID
• Build automation workflows using APIs, Webhooks, ServiceNow, Jira, SOAR, and SIEM tools.
• Drive remediation activities through data classification, encryption, least-privilege access, and governance controls.
• Develop SOPs, playbooks, and operational runbooks for data security incidents.

Required Skills

Mandatory Skills

• Strong hands-on experience with Forcepoint DLP (Web, Endpoint & Email).
• Experience working with Forcepoint DSPM.
• Good understanding of:
• Data Loss Prevention (DLP)
• Data Security Posture Management (DSPM)
• Data Classification & Data Governance
• Insider Threat Management
• Experience with security monitoring, incident response, and remediation.
• Hands-on experience integrating security solutions with:
• Microsoft Sentinel
• Splunk
• ServiceNow
• SOAR Platforms
• Experience with:
• Microsoft 365
• Exchange Online
• SharePoint
• AWS
• S3
• Entra ID
• Knowledge of cloud security, CASB, endpoint security, and data protection technologies.
• Experience with APIs, scripting, automation, and webhook integrations.
• Strong analytical, troubleshooting, and reporting skills.

Preferred Skills

• Experience in SOC, Cyber Security Operations, or Enterprise Data Security environments.
• Exposure to insider risk management and security governance programs.
• Knowledge of GenAI security controls and SaaS security platforms.
• Experience managing large-scale enterprise DLP deployments.
• Vendor management and stakeholder communication experience.