Job Responsibilities : Threat Signal Analysis & Data Monitoring · Continuously monitor and analyze threat signals from SIEM, DLP, endpoint detection, email security, cloud access, and HR/behavioral data sources to identify anomalous and high-risk activity. · Correlate multi-source data — including access logs, data movement telemetry, badge records, and productivity signals — to build a holistic risk picture for individuals and populations. · Develop, tune, and operationalize detection use cases, alerting thresholds, and behavioral baselines to reduce noise and improve signal fidelity. · Build and maintain dashboards, metrics, and trend reports that communicate program effectiveness to leadership. DLP Triage & Processing · Own the end-to-end triage lifecycle for DLP alerts across endpoints, cloud environments (M365, Google Workspace, AWS), and email — from initial alert review through disposition and escalation. · Classify and prioritize incidents by sensitivity, intent, and potential business impact; apply consistent triage frameworks to ensure efficient and defensible case handling. · Identify policy gaps, false-positive patterns, and emerging exfiltration vectors; recommend DLP policy refinements to reduce risk while minimizing friction for legitimate business activities. · Maintain accurate, timely case records in the case management system, ensuring chain-of-custody integrity for all evidence. Investigations · Lead and conduct end-to-end investigations of potential insider risk incidents — including IP theft, data exfiltration, policy violations, sabotage, and pre-departure data staging. · Collect, preserve, and analyze digital evidence from endpoint forensics, cloud storage, communication platforms, and HR systems in accordance with legal and evidentiary standards. · Produce comprehensive, well-structured investigation reports documenting findings, timelines, impact assessments, and recommended actions suitable for legal, HR, and executive audiences. · Manage multiple concurrent active investigations with rigor, discretion, and appropriate urgency. Subject Interviews · Plan and conduct structured subject interviews in coordination with Legal, HR, and business leadership — applying established interview methodologies tailored to insider risk contexts (e.g., cognitive interviewing, motivational interviewing). · Conduct witness interviews to gather corroborating information and context; document findings with accuracy and impartiality. · Maintain composure and objectivity in sensitive, adversarial, or emotionally charged interview settings; protect subject dignity while gathering actionable intelligence. Legal Collaboration & Case Adjudication · Partner closely with Legal and Employment Law to ensure investigations comply with applicable labor laws, privacy regulations, and evidentiary standards across all operating jurisdictions (U.S., India, Israel, EU, and Asia-Pacific). · Present investigation findings, evidence packages, and risk assessments to Legal and HR for case adjudication — including decisions on disciplinary action, civil litigation, criminal referral, or administrative closure. · Support the preparation of materials for regulatory inquiries, litigation holds, and law enforcement cooperation when required. · Track and document case dispositions and lessons learned to continuously improve program policy and legal defensibility. Threat Intelligence & Risk Program Development · Develop and maintain an insider threat intelligence capability — tracking threat actor TTPs relevant to the semiconductor industry, including economic espionage, nation-state recruitment, and supply chain manipulation. · Produce threat intelligence products (briefings, advisories, risk reports) for security leadership, HR, and business unit heads to inform enterprise risk decisions. · Monitor the external threat landscape, including geopolitical developments, export control changes, and industry-specific threat reporting from CISA, FBI, and
Source: HCLTech careers — Read the original posting and apply
This role is listed by the employer on its own careers site. Kaam Ki Khoj does not process applications for it.
HCLTech is an employer in the IT/Computers - Software, Software Services sector with operations in India. This is a directory listing maintained by Kaam Ki Khoj so that candidates can find the organisation; it is not an official company page and Kaam... Read More
Upload your CV once — we read it, build your profile and put you in front of every employer hiring on Kaam Ki Khoj. No forms, no fees.
