We are seeking a skilled and detail-oriented
Data Security Professional
to strengthen our organization’s data protection and access control posture across cloud, SaaS, endpoint and network environments. This role focuses on implementing and operating data security controls, enforcing Zero Trust access, preventing data loss and ensuring secure usage of enterprise applications and platforms.
The ideal candidate will bring strong technical expertise in security platforms and a practical understanding of protecting sensitive data across distributed enterprise environments.
Key Responsibilities
Security Engineering
Design, implement and operate enterprise security controls across web, cloud, SaaS, and endpoint environments using platforms such as
Zscaler, Netskope, CASB, ZTNA, Secure Browsers, SWG (Secure Web Gateway)
Partner with infrastructure, application and IT teams to securely onboard users and applications, enforce device posture checks, and apply least-privilege access principles across internal and third-party systems.
Support endpoint security and
MDM
integrations to ensure compliant device access, enforce baseline security controls, and reduce exposure across managed and unmanaged endpoints.
Hands-on experience with end to end
vulnerability management tools
such as
Qualys and Tenable (Nessus)
to perform security assessments across
endpoints, cloud infrastructure and network appliances
.
Data Protection and Controls
Design, implement and continuously refine
Data Loss Prevention (DLP)
policies to safeguard sensitive information such as PII, financial data, credentials and confidential business data across cloud applications, endpoints, email and web channels.
Deploy and manage
CASB
capabilities to achieve comprehensive visibility into cloud application usage, enforce data sharing controls and prevent unauthorized data movement or exfiltration.
Operate and fine-tune
email security gateways
(e.g., Proofpoint,mimecast) to identify and block phishing attacks, malware, and data leakage attempts, ensuring secure organizational email communication.
Monitor, analyze, and optimize DLP alerts and detection rules to minimize false positives while maintaining effective data protection coverage.
Manage and respond to data security incidents identified during assessments, maintain detailed incident records on a monthly basis and ensure timely investigation, resolution and reporting of all incidents.
Threat Monitoring and Incident Support
Continuously monitor and analyze security telemetry, logs, and alerts from
Network DLP, Zscaler, Netskope, Email Security Gateway, and endpoint platforms
to identify sensitive data movement, policy violations, anomalous access patterns, and potential data exfiltration attempts.
Perform in-depth investigation and response to data security incidents by correlating Network DLP events with data classification tags, user activity and behavior.
Support containment actions, conduct root cause analysis, and validate remediation measures to ensure long-term protection of sensitive data across network, cloud and endpoints.
Collaborate closely with
SOC and incident response teams
to enhance detection logic, optimize alert fidelity, reduce false positives, and improve end-to-end visibility into data-related security threats.
Collaboration and Reporting
Collaborate with cross-functional teams including IT, engineering, and business stakeholders to embed data security and Zero Trust principles into system architecture and daily operations.
Provide clear and actionable insights through dashboards, reports and summaries highlighting data exposure risks, control gaps, and recommended improvements.
Contribute to the creation and continuous improvement of security standards, operational runbooks, and best practices, and support internal knowledge-sharing sessions to improve overall security maturity.
Required Skills & Experience
6 years
of experience in Data Security, Cloud Security or Enterprise Security Engineering
Hands-on experience with
Zscaler, Netskope, CASB, ZTNA, Secure Browsers, SWG (Secure Web Gateway)
and similar platforms
Strong understanding of
DLP technologies
, data classification, and data protection strategies
Hands on experience with
email security gateways
such as Proofpoint, mimecast
Familiarity with
MDM, endpoint security and access controls
Working knowledge of
cloud platforms
(AWS, Azure, GCP) and SaaS security models
Ability to analyze logs, alerts, and telemetry to drive meaningful security outcomes
ATS Match is available
1) Upload your resume. 2) Open any job and click Check ATS Match to see your fit score.