Endpoint & DLP Engineer – L3
Listed on 2026-09-29
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Network Security, Systems Engineer
Endpoint & DLP Engineer – L3 DXC Technology | United Arab Emirates | On-site – Senior Analyst I Function:
Cyber Security – Managed Detection & Response Job Summary
DXC Technology is seeking an experienced Endpoint & DLP Engineer – L3 to engineer, administer, optimize, and support enterprise Endpoint Security, EDR/XDR, and Data Loss Prevention (DLP) capabilities within a complex cybersecurity environment in the UAE.
The role requires strong hands-on expertise in endpoint protection, threat prevention and detection, DLP policy management, platform integrations, incident support, and advanced L3 troubleshooting.
Key Responsibilities- Engineer, configure, administer, maintain, and optimize enterprise Endpoint Security, EDR/XDR, and Data Loss Prevention (DLP).
- Manage endpoint security policies across workstations, servers, and other supported enterprise endpoints.
- Configure and tune malware prevention, behavioral detection, application/device controls, exploit protection, and endpoint detection policies
. - Develop, implement, and tune DLP policies and rules covering endpoints, email, web, cloud services, and sensitive data channels as applicable.
- Configure DLP policies for data classification, monitoring, blocking, alerting, and exception management
. - Integrate endpoint and DLP platforms with SIEM, SOAR, IAM, email security, cloud security, threat intelligence, and other cybersecurity technologies
. - Provide L3 troubleshooting for complex endpoint agent, policy, connectivity, performance, detection, and DLP issues
. - Support SOC/MDR teams during advanced investigations involving compromised endpoints, malware, suspicious activity, or potential data leakage.
- Analyze and tune security policies to improve detection and protection while minimizing false positives and operational impact.
- Support platform upgrades, agent deployments, configuration changes, health monitoring, and performance optimization.
- Coordinate with infrastructure, workplace, cloud, network, application, and cybersecurity teams to resolve cross-platform issues.
- Maintain technical documentation covering configurations, integrations, policies, troubleshooting procedures, and operational standards.
- 5+ years of cybersecurity experience
, including strong hands-on endpoint security and/or DLP engineering experience. - Experience with enterprise EDR/XDR technologies such as Microsoft Defender for Endpoint, Crowd Strike Falcon, Sentinel One, Trellix, Palo Alto Cortex XDR, or equivalent.
- Experience with enterprise DLP platforms such as Microsoft Purview DLP, Forcepoint DLP, Broadcom/Symantec DLP, Trellix DLP, or equivalent.
- Strong knowledge of endpoint protection, EDR/XDR, malware prevention, threat detection, device/application control, and endpoint hardening
. - Hands‑on experience configuring and tuning DLP policies, detection rules, data classifications, exceptions, and enforcement controls
. - Experience integrating endpoint/DLP technologies with SIEM, SOAR, IAM, cloud, email, and other security platforms
. - Strong troubleshooting experience across endpoint agents, policies, integrations, and security controls.
- Understanding of SOC/MDR operations, incident response, MITRE ATT&CK, and data protection principles
. - Working knowledge of Power Shell, Python, APIs, or other automation/scripting technologies is advantageous.
- Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related discipline.
- Experience supporting large enterprise SOC/MDR or managed security environments
. - Experience securing both on-premises and cloud-connected endpoints
. - UAE/GCC experience is advantageous.
- Certifications related to Microsoft Security, Crowd Strike, Forcepoint, Symantec/Broadcom, GIAC, Security+, or CySA+ are preferred.
Join DXC Technology and contribute to strengthening enterprise endpoint protection, threat detection, and data loss prevention capabilities in the UAE.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).