L2 Operations Lead - DLP

L2 Operations Lead - DLP

Level 2 operations role for data loss prevention services.

Support level

L2 Operations

Domain

Data Loss Prevention

Scope

Microsoft Purview, Microsoft Defender and Symantec Email encryption Service.

Support the clients DLP services. Respond to DLP events & incidents 24x7 and escalate when needed.

Process

- End-to-end incident management including Troubleshoot DLP related issues.

get it resolved or escalate to L3 or further to resolve & close.

- Respond to, analyse and escalate DLP events per SOP, 24x7.

- Support Microsoft Purview and Microsoft Defender (not the administration).

- Report security issues promptly with recommended actions.

- Support Symantec email encryption Service.

- Follow client security standards and guidelines.

- Keep ServiceNow/Purview tickets current, with clear resolution and closure notes.

- Assist Major Incident Manager & join RCA reviews. Update SOPs and knowledge-base articles related to DLP domain.

- Work with Malware Tools, Network Security and IDAM on cross-tower issues.

Tools

- Microsoft Purview

- Microsoft Defender

- Symantec Email encryption Service

- ServiceNow & Purview

Technologies

- DLP policies and event analysis

- Information classification and labelling

- Endpoint agents

- E-mail, web and endpoint data controls

- Python or PowerShell scripting

- AI & Automations

Experience

- 10+ Years of L2 Data Loss Prevention experience

- 24x7 support environment

- Symantec Email encryption Service

- DLP event handling and escalation

- Microsoft Purview & Microsoft Defender

- Handling confidential event data

- ITSM incident, problem and change processes

- Clear written and spoken English

- Working with C-suite personnel

Preferred Certifications

- Symantec Data Loss Prevention Administrator

- Microsoft SC-400