Endpoint & DLP Engineer – L3

Endpoint & DLP Engineer – L3

DXC Technology | United Arab Emirates | On-site – Senior Analyst I

Function: Cyber Security – Managed Detection & Response

Job Summary

DXC Technology is seeking an experienced Endpoint & DLP Engineer – L3 to engineer, administer, optimize, and support enterprise Endpoint Security, EDR/XDR, and Data Loss Prevention (DLP) capabilities within a complex cybersecurity environment in the UAE.

The role requires strong hands-on expertise in endpoint protection, threat prevention and detection, DLP policy management, platform integrations, incident support, and advanced L3 troubleshooting.

Key Responsibilities

• Engineer, configure, administer, maintain, and optimize enterprise Endpoint Security, EDR/XDR, and Data Loss Prevention (DLP).
• Manage endpoint security policies across workstations, servers, and other supported enterprise endpoints.
• Configure and tune malware prevention, behavioral detection, application/device controls, exploit protection, and endpoint detection policies.
• Develop, implement, and tune DLP policies and rules covering endpoints, email, web, cloud services, and sensitive data channels as applicable.
• Configure DLP policies for data classification, monitoring, blocking, alerting, and exception management.
• Integrate endpoint and DLP platforms with SIEM, SOAR, IAM, email security, cloud security, threat intelligence, and other cybersecurity technologies.
• Provide L3 troubleshooting for complex endpoint agent, policy, connectivity, performance, detection, and DLP issues.
• Support SOC/MDR teams during advanced investigations involving compromised endpoints, malware, suspicious activity, or potential data leakage.
• Analyze and tune security policies to improve detection and protection while minimizing false positives and operational impact.
• Support platform upgrades, agent deployments, configuration changes, health monitoring, and performance optimization.
• Coordinate with infrastructure, workplace, cloud, network, application, and cybersecurity teams to resolve cross-platform issues.
• Maintain technical documentation covering configurations, integrations, policies, troubleshooting procedures, and operational standards.

Required Experience

• 5+ years of cybersecurity experience, including strong hands-on endpoint security and/or DLP engineering experience.
• Experience with enterprise EDR/XDR technologies such as Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Trellix, Palo Alto Cortex XDR, or equivalent.
• Experience with enterprise DLP platforms such as Microsoft Purview DLP, Forcepoint DLP, Broadcom/Symantec DLP, Trellix DLP, or equivalent.
• Strong knowledge of endpoint protection, EDR/XDR, malware prevention, threat detection, device/application control, and endpoint hardening.
• Hands‑on experience configuring and tuning DLP policies, detection rules, data classifications, exceptions, and enforcement controls.
• Experience integrating endpoint/DLP technologies with SIEM, SOAR, IAM, cloud, email, and other security platforms.
• Strong troubleshooting experience across endpoint agents, policies, integrations, and security controls.
• Understanding of SOC/MDR operations, incident response, MITRE ATT&CK, and data protection principles.
• Working knowledge of PowerShell, Python, APIs, or other automation/scripting technologies is advantageous.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related discipline.
• Experience supporting large enterprise SOC/MDR or managed security environments.
• Experience securing both on-premises and cloud-connected endpoints.
• UAE/GCC experience is advantageous.
• Certifications related to Microsoft Security, CrowdStrike, Forcepoint, Symantec/Broadcom, GIAC, Security+, or CySA+ are preferred.

Join DXC Technology and contribute to strengthening enterprise endpoint protection, threat detection, and data loss prevention capabilities in the UAE.