DLP Analyst – Email Security Monitoring

About the Client

Our client is one of India's leading diversified manufacturing organizations with a strong presence in the automotive and industrial engineering sector. With multiple manufacturing facilities and corporate offices across the country, the company supplies high-quality components and engineering solutions to leading domestic and global OEMs. The organization is focused on innovation, operational excellence, digital transformation, and strengthening its cybersecurity posture to safeguard critical business and intellectual property assets.

As part of its enterprise security initiatives, the company is expanding its Information Security team to enhance email security monitoring, data loss prevention (DLP), and incident response capabilities. This role offers the opportunity to work in a mature enterprise environment, collaborating with cross-functional business teams to protect sensitive corporate information while supporting secure business operations.

Job Summary

We are looking for a detail-oriented DLP Analyst – Email Security Monitoring to monitor, investigate, and triage Data Loss Prevention (DLP) alerts generated through Proofpoint Email Security. This role requires strong analytical thinking and business judgment rather than simply responding to automated alerts.

The ideal candidate will review flagged emails, attachments, and communication context to determine whether an alert represents an actual data leakage incident, a legitimate business activity, or a false positive. The role involves close coordination with multiple business functions while maintaining confidentiality and ensuring compliance with organizational security policies.

Key Responsibilities

1. Monitor and triage daily Data Loss Prevention (DLP) alerts generated through Proofpoint Email Security.
2. Review email body content, attachments, and metadata to determine the intent and sensitivity of communications.
3. Analyze sensitive information including:
4. Personally Identifiable Information (PII)
5. Financial documents
6. Customer and supplier information
7. Contracts and commercial agreements
8. Pricing information
9. Engineering drawings
10. CAD files
11. Bill of Materials (BOM)
12. Intellectual Property (IP)
13. Classify alerts as:
14. True Security Incident
15. False Positive
16. Approved Business Exception
17. Document investigation findings with clear reasoning and maintain accurate audit records.
18. Escalate confirmed incidents through the organization's Incident Response (IR) process.
19. Coordinate with Sales, Purchase, Engineering, Finance, HR, and other business teams to validate legitimate business communications.
20. Identify recurring false positives and recommend improvements to DLP policies, dictionaries, and detection rules.
21. Support continuous improvement initiatives to reduce alert fatigue and improve detection accuracy.
22. Maintain confidentiality while handling sensitive corporate communications.
23. Ensure compliance with organizational security standards and data protection policies.

Required Qualifications

1. Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related discipline.
2. 1–3 years of experience in:
3. Data Loss Prevention (DLP)
4. Security Operations Center (SOC)
5. Email Security Operations
6. Hands-on experience with Proofpoint DLP or similar DLP solutions such as:
7. Microsoft Purview
8. Forcepoint DLP
9. Symantec DLP
10. Strong understanding of:
11. Email security
12. Data classification
13. Sensitive information handling
14. Information security principles
15. Excellent English reading and comprehension skills with the ability to understand business context, communication intent, and document sensitivity.
16. Strong analytical, investigative, and decision-making skills.
17. High level of integrity and ability to handle confidential information.

Preferred Qualifications

1. Experience working in manufacturing, automotive, engineering, or industrial organizations.
2. Familiarity with:
3. Engineering drawings
4. CAD files
5. BOM documentation
6. Vendor pricing
7. Procurement documents
8. Basic understanding of:
9. SMTP
10. Email routing
11. Email headers
12. Attachment formats
13. Security certifications such as:
14. CompTIA Security+
15. Proofpoint Product Training
16. Microsoft Security Certifications

Technical Skills

1. Proofpoint Enterprise DLP
2. Email Security
3. Incident Triage
4. Data Classification
5. Security Monitoring
6. Alert Investigation
7. Information Security
8. Microsoft Purview
9. Forcepoint DLP
10. Symantec DLP
11. Incident Response
12. Audit Documentation
13. Risk Assessment
14. Email Analysis
15. Security Operations