Cybersecurity Engineer III

Job Description

The Senior Data Protection Engineer provides thought leadership and strengthens the cybersecurity team in protecting the organization’s sensitive data across endpoints, networks, cloud, and email. This role designs, implements, and optimizes enterprise Data Loss Prevention (DLP) solutions, with deep expertise in the Microsoft data protection suite (Microsoft Purview), Varonis, and cloud data protection tools such as Wiz in AWS environments. In addition to DLP, the successful candidate supports cybersecurity incident response and other initiatives across a range of security domains and participates in on‑call responsibilities.

• Lead efforts in designing, deploying, and maintaining enterprise DLP solutions across endpoint, network, cloud, and email channels.
• Administer, configure, and optimize Microsoft Purview and Varonis to classify, monitor, and protect sensitive and regulated data.
• Configure and manage Microsoft Purview Insider Risk Management to detect, investigate, and mitigate risky user activity and potential insider threats.
• Design and enforce email DLP policies to prevent the unauthorized transmission of PHI and other sensitive data via email and messaging channels.
• Implement and manage data protection across cloud environments such as AWS, leveraging tools such as Wiz to discover, classify, and safeguard sensitive data and remediate data exposure risks.
• Develop, enforce, tune, and continuously improve DLP policies, rules, and data classification schemes to minimize false positives and data exfiltration risk.
• Investigate, triage, and respond to DLP alerts and data loss incidents, including root cause analysis and remediation in coordination with privacy, compliance, and legal teams.
• Participate in cybersecurity incident response and other initiatives across a range of security domains, working with a dynamic team to investigate, contain, and remediate incidents.
• Participate in a rotating on‑call schedule to support incident response and time‑sensitive security events outside of standard business hours.
• Collaborate with teams throughout ISS, as well as Privacy and Compliance, to ensure the protection of PHI and adherence to HIPAA and other regulatory requirements.
• Provide mentorship and guidance to junior and mid‑level cybersecurity engineers.
• Participate in the development and implementation of cybersecurity strategies and policies.

• Bachelor’s degree or higher in Cybersecurity, Information Technology, or a related field; equivalent experience may be considered for exceptional candidates.
• Relevant certifications highly desirable, including Microsoft Certified:
  Information Protection and Compliance Administrator Associate (SC-400), CISSP, GIAC GSEC, or CompTIA Security+.

• Strong understanding of DLP principles, data classification, and information protection practices.
• Working knowledge of HIPAA and its requirements for protecting electronic PHI (ePHI) in a healthcare environment.
• Deep, hands‑on knowledge of the Microsoft data protection suite (Purview DLP, Information Protection, sensitivity labeling, Insider Risk Management), Varonis, and other data security technologies across endpoint, network, cloud, and email.
• Extensive experience implementing and operating enterprise DLP programs, including policy creation, data classification, and incident response.
• Experience protecting data in cloud environments such as AWS, including use of cloud security and data protection tools such as Wiz.
• Hands‑on experience with cybersecurity incident response, including investigation, containment, and remediation as part of a team.
• Solid overall knowledge of cybersecurity principles and practices beyond data protection, with the ability to contribute across a broad range of security domains.
• 3-5 years of experience in DLP, data security, or information technology in a large organization, preferably healthcare.
• Strong analytical and problem‑solving skills.
• Excellent communication and teamwork abilities.
• Ability to manage cybersecurity projects within a healthcare organization, balancing security objectives with operational and regulatory…