Senior Security Operations Engineer
New
I
Included HealthHealthcare Technology
United StatesFull-TimeSenior
SalaryZone A: $128,130 - $180,990+ equity + benefits; Zone B: $140,943 - $199,089 + equity + benefits; Zone C: $153,756 - $217,188 + equity + benefits; Zone D: $166,569 - $235,287 + equity + benefits
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years
- Required Skills
- PythonSQL
Requirements
- 5+ years of hands-on experience in security operations, incident response, or security engineering.
- Direct, hands-on experience deploying, tuning, and operating DLP tools across endpoint, network, SaaS, and/or cloud environments.
- Experience with Cloud Access Security Broker (CASB) or similar SaaS security controls in a production environment.
- Experience integrating DLP signals into SIEM/SOAR workflows (e.g., CrowdStrike, Splunk, Sentinel).
- Advanced scripting/automation skills (e.g., Python, PowerShell, KQL/SQL) for enrichment, tuning, and reporting on telemetry at scale.
- Experience designing and maintaining data classification and policy frameworks for PHI, PII, PCI, and other sensitive data types.
Responsibilities
- Lead the response to DLP and data security incidents, including investigation, containment, remediation, and root cause analysis for suspected data exfiltration or improper data handling.
- Own the deployment, configuration, and continuous tuning of DLP controls across endpoints, network egress, SaaS applications, and cloud storage to protect PHI, PII, PCI, and other sensitive data.
- Develop and maintain DLP policies, rules, and classifications that balance security, usability, and regulatory/client requirements.
- Build and refine automated response playbooks and workflows that enrich, triage, and respond to alerts, reducing manual effort and mean time to respond.
- Perform proactive hunting for anomalous data movement, including unusual destinations, channels, or volumes.
- Define and track key DLP metrics (coverage, detection quality, MTTD/MTTR, false positive rate) and communicate progress to security leadership and cross-functional partners.
View Full Description & ApplyYou'll be redirected to the employer's site
