Forcepoint DLP (Data Loss Prevention) Engineer

Responsibilities

We are hiring! We are looking for a Forcepoint DLP (Data Loss Prevention) Engineer. This qualified individual will provide engineering, installation, configuration and integration of Forcepoint products.

 

What you will do:

 

• Will work with the following Network Security Solutions:

• Forcepoint Data Guard Virtual Appliances
• Forcepoint Next Generation Firewalls
• Forcepoint Next Generation Firewall Management Center
• Forcepoint DLP Suite (IP Protection, User & Data Security)
• Forcepoint DLP Supplemental servers (e.g. Protector, Crawler, etc…)
• Forcepoint DLP Protector for ICAP
• Forcepoint DLP Analytics
• Forcepoint DLP Web Content Gateways
• Provide troubleshooting and support of a complete DLP tool suite (Forcepoint) environment including compliance to client security standards as well as maintenance such as version upgrades.
• Prepare technical documentation to include design documentation, new requirements and subsequent solutioning documents and Standard Operating Procedures.
• Provide technical briefings to Peraton and client technical and non-technical leadership stakeholders.
• Work alongside federal clients to help them mitigate risk with the use of continuous monitoring and incident response.
• Establish DLP security controls to ensure protection of client systems.
• Implement cutting edge DLP security tools for our federal clients utilizing NIST, RMF, and FISMA compliance frameworks.
• Perform Level 1/Level 2 DLP event review and analysis.
• Perform routine health checks and ensure availability of the DLP solution.
• Identify policy tuning/enhancement opportunities to reduce false positives.
• Ensure SLAs/SLOs/OLAs related to incident, change and service requests are adhered to on time.

 

Qualifications

 

Required Qualifications:

• Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD. Additional years of experience maybe accepted in lieu of the degree.
• 2+ years of work experience on DLP solutions (e.g., Forcepoint, Symantec, McAfee, etc.)
• Must have experience with network firewalls, Data Loss Prevention functions.
• Demonstrated experience in Cybersecurity to include security design and architecture, current technologies, DLP design and development, and experience in a technical operational environment.
• Knowledge and experience implementing and managing DLP programs. . Must have operational experience with DLP Encryption technologies, including hardware refresh, software testing, patching, software upgrades, and complex troubleshooting techniques.
• Familiar with developing, testing, configuring, and integrating security tools.
• Familiar with policy configurations, testing and implementations on DLP solution.
• Prepare documentation such as technical standard operating procedures (SOP), runbooks, etc. for DLP.
• Knowledge on basic security concepts (e.g., CASB, Data Classification, Data Discovery, encryption, etc.).
• Technical background in network administration (TCP/IP, firewalls, routers) as well as Linux/Unix and Windows administration.
• Self-starter with troubleshooting experience and ability to work on their own to resolve product and system issues.
• Experience with Cloud implementations and environments (AWS GovCloud experience preferred).
• Experience with IRS PUB 1075.
• Extensive knowledge and experience with information security standards, policies and practices NIST SP 800-53rev4, SP 800-37 rev2, FIPS-199, NIST 800-171.
• Excellent writing, documentation, and interpersonal communication skills.
• Experience writing relevant content for information system security documentation System Security Plans (SSP), Plans of Action and Milestones (POA&Ms).
• Must be a US Citizen.
• Must be able to obtain and maintain a Public Trust clearance. 

Preferred Qualifications:

• Ability to obtain a Top-Secret level government clearance. Preference will be given to those candidates who already have an equivalent level government clearance.
• DLP product certifications (e.g., Forcepoint DLP Engineer or Forcepoint NGFW Engineer).
• CISSP, or equivalent certification desired.
• Experience working in an IRS PUB 1075 environment preferred.
• DoD 8570 IAT Level II certifications (i.e., CISSP, CISM).
• BS in Information Technology or Information Security desired.
• Expert level knowledge of DLP solutions such as Forcepoint, Symantec, or McAfee.

 

Benefits:

 

At Peraton, our benefi