Info Security Consultant II

Bank of America

. Serve as the primary SME for enterprise DLP technologies, policies, controls, and monitoring capabilities .

Posted 10/22/2026full-timeMumbai • IndiaSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates deep expertise in Data Loss Prevention (DLP) technologies and controls, with a strong focus on incident response, regulatory compliance, and cloud security across AWS and Azure environments. Proficient in leveraging AI/ML for security analytics and developing automated workflows to enhance operational effectiveness.

Highest-signal resume keywords

Data Loss Prevention (DLP) TechnologiesIncident ResponseAWS and Azure SecuritySIEM and Security AnalyticsAI/ML for Security Analytics

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data Loss Prevention (DLP)Incident ResponseSIEMKQLSQLPythonPowerShellAutomationOrchestrationMITRE ATT&CK Framework

Soft Skills

Exceptional CommunicationProblem-SolvingDecision-MakingStakeholder ManagementMentoring

Tools & Technologies

Microsoft PurviewAWS GuardDutyMicrosoft SentinelSplunkQRadarElasticSOAR PlatformsAzure Security CenterCloud Security SolutionsDigital Guardian

Certifications & Qualifications

CEHSecurity+CCNACloud Certifications

Industry Keywords

Data ProtectionRegulatory ComplianceInsider ThreatsCybersecurityZero Trust Architecture

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityPythonSplunkSQL

About the role

Key responsibilities & impact

Serve as the primary SME for enterprise DLP technologies, policies, controls, and monitoring capabilities
Design, implement, tune, and maintain DLP controls across endpoint, network, email, web, SaaS, and cloud environments
Lead investigations involving data exfiltration, insider threats, unauthorized disclosures, and policy violations
Develop and optimize detection use cases for sensitive data protection, insider risk monitoring, and regulatory compliance
Partner with business, technology, and risk teams to identify data protection risks and implement controls
Conduct advanced investigations using SIEM, EDR/XDR, DLP, cloud security, identity security, and threat intelligence platforms
Analyze logs, events, and telemetry to determine attack scope, root cause, business impact, and remediation requirements
Lead incident response involving DLP violations, cloud security incidents, insider threats, and data exposure
Develop and improve MITRE ATT&CK-aligned detection content
Design and monitor DLP and data protection controls across AWS and Azure
Support cloud-native security solutions including AWS GuardDuty, Macie, Security Hub, CloudTrail, Microsoft Defender for Cloud, Purview, Sentinel, Azure Monitor, and Azure Security Center
Investigate cloud threats involving sensitive data exposure, excessive permissions, misconfigurations, and unauthorized access
Develop cloud security monitoring and detection use cases
Apply AI/ML, behavioral analytics, anomaly detection, Generative AI, and advanced analytics to improve DLP and security operations
Integrate AI/ML solutions into DLP monitoring, detection, and response processes
Design automated response workflows using SOAR platforms and scripting/API integrations
Improve MTTD and MTTR through automation and orchestration
Maintain automated playbooks for DLP, cybersecurity, and cloud security operations
Mentor junior analysts and operational teams
Drive security process improvements and operational maturity initiatives
Develop metrics, dashboards, and reporting for DLP effectiveness, incident response, and cloud security posture
Communicate findings and recommendations to technical and executive stakeholders

Requirements

What you’ll need

B.E. / B.Tech / M.E. / M.Tech / B.Sc. / M.Sc. / BCA / MCA, preferably IT/CS specialization
8–10+ years of experience; foundational skills specify 10+ years in Information Security, Security Operations, DLP Operations, Incident Response, Detection Engineering, or related cybersecurity functions
Deep expertise in Data Loss Prevention (DLP) technologies and controls
Hands-on experience with Microsoft Purview DLP, Symantec DLP, Forcepoint DLP, Palo Alto Enterprise DLP, or Digital Guardian
Strong understanding of data classification, information protection, insider risk, and regulatory compliance requirements
Experience investigating and responding to DLP incidents across endpoint, network, email, cloud, and SaaS environments
Strong experience with SIEM and Security Analytics platforms including Microsoft Sentinel, Splunk, QRadar, or Elastic
Proficiency in KQL, SQL, Python, and PowerShell
Experience with SOAR platforms, automation, orchestration, and API integrations
Strong understanding of MITRE ATT&CK framework and cyber adversary TTPs
Extensive hands-on experience securing and monitoring AWS and Azure environments
Experience with AWS Macie, GuardDuty, Security Hub, Defender for Cloud, and Microsoft Purview
Experience leveraging AI/ML for security analytics, user behavior analytics, anomaly detection, insider threat detection, or predictive risk analysis
Track record of reducing alert noise, improving detection coverage, improving MTTR, and enhancing operational effectiveness
Ability to promote awareness of current and emerging cybersecurity threats and advise on information security exposure
Ability to assess and mitigate cybersecurity risks related to applications, networks, infrastructure, and public cloud
Ability to interpret information security requirements in policies, standards, and procedures and reinforce them through education and awareness
Ability to support security ambassadors and strategic risk mitigation priorities
Certifications such as CEH, cloud certifications, Security+, CCNA, or equivalent are listed
Exceptional communication and executive presence
Experience implementing AI-driven DLP and Insider Risk Management programs
Experience with UEBA
Familiarity with LLMs, Generative AI security controls, and AI governance frameworks
Knowledge of Zero Trust Architecture and DSPM
Executive-level communication and stakeholder management skills
Experience leading geographically distributed cybersecurity teams
Strong problem-solving and decision-making abilities
Experience supporting enterprise-scale digital transformation and cloud migration initiatives
Availability for 11:30am to 08:30pm IST work timings

Benefits

Comp & perks

Competitive benefits supporting physical, emotional, and financial well-being
Flexible work arrangements depending on role
Career opportunities to learn, grow, and make an impact
Diversity and inclusive workplace
Professional development through learning and growth opportunities