Senior Security Operations Engineer (DLP)

Location: Remote

What you will do

• Lead investigations, containment, remediation, and root cause analysis for DLP and suspected data exfiltration incidents.
• Deploy, configure, and continuously tune DLP controls across endpoints, network egress, SaaS applications, and cloud storage.
• Develop and maintain DLP policies, rules, classifications, and controls that balance security, usability, and regulatory requirements.
• Build automated response playbooks and workflows to enrich, triage, and respond to security alerts.
• Proactively hunt for anomalous data movement and track DLP metrics, including coverage, detection quality, MTTD, MTTR, and false positive rates.

Requirements

• 5+ years of hands-on experience in security operations, incident response, or security engineering, with a strong focus on data protection and DLP.
• Hands-on experience deploying, tuning, and operating endpoint, network, SaaS, or cloud DLP tools.
• Production experience with CASB or similar SaaS security controls.
• Experience integrating DLP signals into SIEM/SOAR workflows such as CrowdStrike, Splunk, or Sentinel.
• Advanced scripting and automation skills with Python, PowerShell, KQL, or SQL.
• Experience designing and maintaining data classification and policy frameworks for PHI, PII, PCI, and other sensitive data.

Culture & Benefits

• Remote-first work environment.
• 401(k) savings plan through Fidelity.
• Medical, vision, dental, and disability insurance options.
• Paid Time Off and Discretionary Time Off.
• 12 weeks of fully paid parental leave and family-building support.
• Work-from-home reimbursement.