Responsibilities

• Provide first-line triage for alerts, user queries and basic incidents; execute runbooks, escalated per SLA.
• Perform detailed analysis, tuning, rule creation, and remediation of incidents requiring technical troubleshooting across DLP, classification, and IRM platforms.
• Lead advanced investigations, root cause analysis, complex incident containment, custom rules/scripts, integration with SIEM/SOAR, and vendor engagement for bug fixes/feature requests.
• Maintain an issues register/deviation tracker; prioritize, assign ownership, and track SLA‑driven resolution.
• Produce incident reports, RCA, and recommendations; implement corrective and preventive actions.
• Identify opportunities to improve detection fidelity, reduce false positives, and enhance user experience.
• Lead tuning, content updates (classification patterns, DLP fingerprints, policy sets), and automation to optimize operations.
...