DLP Analyst – Email Security Monitoring
Location
Faridabad
Work Type
on-site
Salary
As per company standards
Experience
1-3 years
Job Description
About the Client
Our client is one of India's leading diversified manufacturing organizations with a strong presence in the automotive and industrial engineering sector. With multiple manufacturing facilities and corporate offices across the country, the company supplies high-quality components and engineering solutions to leading domestic and global OEMs. The organization is focused on innovation, operational excellence, digital transformation, and strengthening its cybersecurity posture to safeguard critical business and intellectual property assets.
As part of its enterprise security initiatives, the company is expanding its Information Security team to enhance email security monitoring, data loss prevention (DLP), and incident response capabilities. This role offers the opportunity to work in a mature enterprise environment, collaborating with cross-functional business teams to protect sensitive corporate information while supporting secure business operations.
Job Summary
We are looking for a detail-oriented DLP Analyst – Email Security Monitoring to monitor, investigate, and triage Data Loss Prevention (DLP) alerts generated through Proofpoint Email Security. This role requires strong analytical thinking and business judgment rather than simply responding to automated alerts.
The ideal candidate will review flagged emails, attachments, and communication context to determine whether an alert represents an actual data leakage incident, a legitimate business activity, or a false positive. The role involves close coordination with multiple business functions while maintaining confidentiality and ensuring compliance with organizational security policies.
Key Responsibilities
- Monitor and triage daily Data Loss Prevention (DLP) alerts generated through Proofpoint Email Security.
- Review email body content, attachments, and metadata to determine the intent and sensitivity of communications.
- Analyze sensitive information including:
- Personally Identifiable Information (PII)
- Financial documents
- Customer and supplier information
- Contracts and commercial agreements
- Pricing information
- Engineering drawings
- CAD files
- Bill of Materials (BOM)
- Intellectual Property (IP)
- Classify alerts as:
- True Security Incident
- False Positive
- Approved Business Exception
- Document investigation findings with clear reasoning and maintain accurate audit records.
- Escalate confirmed incidents through the organization's Incident Response (IR) process.
- Coordinate with Sales, Purchase, Engineering, Finance, HR, and other business teams to validate legitimate business communications.
- Identify recurring false positives and recommend improvements to DLP policies, dictionaries, and detection rules.
- Support continuous improvement initiatives to reduce alert fatigue and improve detection accuracy.
- Maintain confidentiality while handling sensitive corporate communications.
- Ensure compliance with organizational security standards and data protection policies.
Required Qualifications
- Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related discipline.
- 1–3 years of experience in:
- Data Loss Prevention (DLP)
- Security Operations Center (SOC)
- Email Security Operations
- Hands-on experience with Proofpoint DLP or similar DLP solutions such as:
- Microsoft Purview
- Forcepoint DLP
- Symantec DLP
- Strong understanding of:
- Email security
- Data classification
- Sensitive information handling
- Information security principles
- Excellent English reading and comprehension skills with the ability to understand business context, communication intent, and document sensitivity.
- Strong analytical, investigative, and decision-making skills.
- High level of integrity and ability to handle confidential information.
Preferred Qualifications
- Experience working in manufacturing, automotive, engineering, or industrial organizations.
- Familiarity with:
- Engineering drawings
- CAD files
- BOM documentation
- Vendor pricing
- Procurement documents
- Basic understanding of:
- SMTP
- Email routing
- Email headers
- Attachment formats
- Security certifications such as:
- CompTIA Security+
- Proofpoint Product Training
- Microsoft Security Certifications
Technical Skills
- Proofpoint Enterprise DLP
- Email Security
- Incident Triage
- Data Classification
- Security Monitoring
- Alert Investigation
- Information Security
- Microsoft Purview
- Forcepoint DLP
- Symantec DLP
- Incident Response
- Audit Documentation
- Risk Assessment
- Email Analysis
- Security Operations
Required SkillsProofpointDLPSOCEmailSecurityTriageInvestigationClassificationPIIComplianceDocumentationProofpoint DLPEmail SecurityIncident TriageData ClassificationSecurity MonitoringAlert InvestigationInformation SecurityMicrosoft PurviewForcepoint DLPSymantec DLPIncident ResponseAudit DocumentationRisk AssessmentEmail AnalysisSecurity Operations
Pay: ₹300,000.00 - ₹400,000.00 per year
Work Location: In person