Forcepoint DLP L1/L2 Analyst

Job Description – Forcepoint DLP L1/L2 Analyst

Position: Forcepoint DLP L1 Analyst Experience: 0.5 to 6 Years

Location: As per business requirement (Airoli & Others)

Employment Type: Full-time

Role Overview

We are looking for a Forcepoint DLP L1/L2 Analyst responsible for continuous monitoring, initial analysis, triage, documentation, and timely escalation of Data Loss Prevention (DLP) incidents. The resource will ensure effective incident tracking and coordination while adhering to defined security policies, SOPs, and turnaround timelines.

Key Responsibilities

Continuously monitor Forcepoint DLP dashboards, alerts, and incidents.

Acknowledge, log, categorize, and prioritize DLP alerts based on severity.

Maintain and regularly update the DLP incident and alert tracker.

Review incident details, including user, file, policy triggered, and relevant activity.

Perform initial investigation and identify false-positive incidents as per defined guidelines.

Provide inputs for reducing recurring false positives and DLP policy fine-tuning.

Escalate incidents to relevant teams as per the Bank's defined SOP and escalation process.

Maintain a separate tracker for incidents escalated to the Disciplinary Committee.

Ensure all incident details, actions, and escalation information are accurately documented.

Coordinate with IT, Security, Business Units, and other relevant stakeholders for incident resolution.

Monitor incident resolution timelines and ensure adherence to the defined TAT/SLA.

Prepare and share periodic incident summaries and detailed incident reports.

Ensure all activities comply with organizational security policies and procedures.

Required Skills

Basic knowledge of Forcepoint DLP and Data Loss Prevention concepts.

Understanding of incident monitoring, triage, and escalation processes.

Good analytical and documentation skills.

Knowledge of information security and data protection principles.

Good communication and stakeholder coordination skills.

Preferred Certifications

The following certifications will be an added advantage:

Forcepoint DLP training/certification

Any basic cybersecurity certification