Forcepoint DLP

Administer, support, and maintain the Forcepoint DLP environment. Update and maintain user IDs and Workday dictionaries in Forcepoint. Manage the DLP rule library, including policy updates, reconciliation, and ongoing maintenance. Perform rule tuning by analyzing DLP incidents, identifying false positives, and implementing policy improvements. Document false positive analysis, tuning activities, and policy changes. Create and maintain false positive, user, and destination exceptions based on business requirements. Collaborate with Tier 2 support teams and Deloitte to investigate, resolve, and optimize DLP incidents. Review Forcepoint event output to identify tuning opportunities and improve policy effectiveness while reducing false positives. Support incident investigations and ensure DLP policies align with organizational security standards. Maintain operational documentation, knowledge articles, and standard operating procedures.

5 8 years of experience in Information Security, with at least 4 years of hands-on experience with Forcepoint DLP. Strong expertise in Forcepoint DLP policy administration, rule management, and incident analysis. Experience in rule tuning, false positive analysis, and exception management (user, destination, and policy exceptions). Familiarity with Workday dictionaries, Active Directory, and user identity management. Good understanding of DLP concepts, data classification, and data protection controls. Strong analytical, troubleshooting, and documentation skills. Excellent communication and stakeholder management skills. Ability to work effectively in a collaborative onsite environment with internal teams and external partners.