Data Loss Prevention Support Engineer

We are seeking a Data Loss Prevention (DLP) Support Engineer to support and manage enterprise email security solutions and data protection policies. The ideal candidate will have hands-on experience with email security platforms, strong knowledge of information security practices, and experience working in a Security Operations (SOC) environment.

Key Responsibilities:

• Implement and manage email security solutions to protect against phishing, malware, and other email-based threats.
• Support user-specific policy configurations to tailor security measures according to business requirements.
• Configure recipient verification processes to ensure authenticity of email communications.
• Manage domain, IP, and email whitelisting and blacklisting to enhance email security controls.
• Create and modify security rules as per operational requests and service tickets.
• Analyze and modify quarantine policies to improve email filtering and threat detection.
• Troubleshoot inbound and outbound email delays, routing issues, and delivery problems.
• Classify emails appropriately for whitelisting or blacklisting purposes.
• Monitor and analyze email traffic to identify suspicious activities, threats, and vulnerabilities.
• Support onboarding of new or acquired domains in collaboration with DNS, registration, and Microsoft 365 teams.
• Configure warning banners for external emails and manage exception rules for partners or vendors.
• Utilize Regular Expressions (Regex) for rule creation and modification based on security requirements.
• Support URL rewriting and un-rewriting scenarios and provide necessary exceptions when needed.
• Respond to email-related security incidents, perform investigations, and assist with remediation.
• Assist in developing and enforcing email security and data protection policies.
• Generate reports related to security incidents, trends, and effectiveness of implemented security measures.
• Support monitoring profiles and incident triage related to File Integrity Monitoring (FIM).

Required Skills & Qualifications:

• Hands-on experience with Data Loss Prevention (DLP) and Email Security technologies.
• Experience working with enterprise email security platforms (Forcepoint experience preferred).
• Strong understanding of information security principles and security operations.
• Experience working in a Security Operations Center (SOC) environment.
• Knowledge of email infrastructure, routing, DNS, and email security frameworks.
• Experience with Regular Expressions (Regex) for rule creation and modification.
• Strong troubleshooting, analytical, and incident response skills.
• Excellent communication and problem-solving abilities.