Endpoint & DLP Engineer – L3

About the Role

DXC Technology seeks a seasoned Endpoint & DLP Engineer – L3 to design, manage, and enhance enterprise-level Endpoint Security, EDR/XDR, and Data Loss Prevention systems within a sophisticated cybersecurity framework based in the UAE.

Key Responsibilities

• Design, deploy, administer, and fine-tune enterprise Endpoint Security, Extended Detection and Response (EDR/XDR), and DLP platforms.
• Oversee endpoint security policy management for desktops, servers, and other organizational endpoints.
• Adjust and maintain malware protection, behavioral monitoring, application and device controls, exploit defenses, and endpoint detection strategies.
• Create, apply, and optimize DLP policies across endpoints, email, web portals, cloud services, and channels handling sensitive information.
• Manage DLP policy configurations for data classification, monitoring activities, blockage, alert systems, and exception handling.
• Facilitate integration of endpoint and DLP tools with SIEM, SOAR, Identity and Access Management (IAM), email security, cloud protection, threat intelligence, and other cybersecurity platforms.
• Conduct complex level 3 troubleshooting on endpoint agents, policies, connectivity challenges, performance issues, detection mechanisms, and DLP concerns.
• Assist SOC/MDR teams in advanced investigations concerning infected endpoints, malware threats, unusual activities, or potential data breaches.
• Analyze security policies to enhance threat detection and protection while reducing false alarms and unnecessary operational disruptions.
• Support platform upgrades, rollout of agents, configuration amendments, monitoring of system health, and performance boosts.
• Liaise with infrastructure, workplace services, cloud, network, application, and cybersecurity teams to solve multi-platform challenges.
• Document technical details including configurations, system integrations, policy setup, troubleshooting steps, and standard operating procedures.

Required Experience and Skills

• Over 5 years of professional experience in cybersecurity with strong practical exposure to endpoint security and/or DLP engineering roles.
• Hands-on operational knowledge of EDR/XDR solutions such as Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Trellix, Palo Alto Cortex XDR, or equivalents.
• Proficiency with enterprise DLP tools like Microsoft Purview DLP, Forcepoint DLP, Broadcom/Symantec DLP, Trellix DLP, or similar systems.
• In-depth understanding of endpoint protection mechanisms, malware prevention, behavioral threat detection, device/application control, and endpoint hardening techniques.
• Experience creating and refining DLP configurations including detection criteria, data tagging, exception management, and enforcement procedures.
• Capability to integrate endpoint and DLP solutions with SIEM, SOAR, IAM, cloud services, email security, and other related cybersecurity platforms.
• Expertise in resolving complex issues involving endpoint agents, policy management, integration glitches, and security enforcement.
• Familiar with SOC/MDR functions, incident handling, MITRE ATT&CK framework, and principles of data safeguarding.
• Exposure to automation and scripting technologies like PowerShell, Python, or API usage is a plus.

Preferred Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related fields.
• Experience in high-scale SOC/MDR or managed security services environment.
• Background securing endpoints both on-premises and cloud-connected.
• Familiarity with UAE/GCC cybersecurity environment is beneficial.
• Certifications such as Microsoft Security, CrowdStrike, Forcepoint, Symantec/Broadcom, GIAC, Security+, or CySA+ are highly regarded.