Security Tools Expert

Role Purpose:
Own and optimize the end-to-end lifecycle of DLP, MFA, WAF, and DAST tooling to protect international insurance operations. Design, implement, and operate these controls across cloud and on-prem environments, ensuring regulatory alignment (GDPR, cross-border data transfer rules, and relevant insurance/privacy standards) while enabling secure business delivery.

Key Responsibilities

Implementation & Deployment

• 
  

  Deploy and integrate DLP, MFA, WAF, and DAST in multi-cloud and on-prem environments by leveraging enterprise cyber defence products.

  
  


• 
  

  Create secure baselines and scalable rule sets tailored to international data flows and regional requirements.

  
  

Operations, Tuning & Monitoring

• 
  

  Monitor tool health, tune rules/policies, manage false positives/negatives, and support incident response using tool data.

  
  


• 
  

  Develop runbooks and escalation paths; contribute to continuous improvement of detection capabilities.

  
  

Vendor & Stakeholder Engagement

• 
  

  Interact with cyber defence product teams and project managers for integration, licensing, and roadmap discussions; liaise with IT, security, and business stakeholders across regions.

  
  

Training & Awareness

• 
  

  Provide hands-on guidance and training on tool usage and policy implications for IT, DevOps, and engineering teams.

  
  

Metrics & Reporting

• 
  

  Define and track KPIs (false positive rate, policy coverage, time-to-tune, incident response metrics, audit readiness); report to security leadership.

  
  

Required Qualifications

• 
  

  3–5 years experience:

  
  
  
  
  • 
    

    Proven, hands-on track record across DLP, MFA, WAF, and DAST in international/regulated environments.

    
    
  
  
  • 
    

    Strong integration experience with SIEM/SOAR, IAM, and CI/CD; ability to own configurations end-to-end.

    
    
  
  
  • 
    

    Knowledge of GDPR and cross-border data transfer considerations; insurance/privacy regulatory awareness.

    
    
  
  
  • 
    

    Certifications such as CISSP, CISM, CCSP, or equivalent vendor credentials.