Cybersecurity Engineer III

Job Description The Senior Data Protection Engineer provides thought leadership and strengthens the cybersecurity team in protecting the organization’s sensitive data across endpoints, networks, cloud, and email. This role designs, implements, and optimizes enterprise Data Loss Prevention (DLP) solutions—with deep expertise in the Microsoft data protection suite (Microsoft Purview), along with Varonis and cloud data protection tools such as Wiz across environments like AWS—to safeguard protected health information (PHI) and other regulated data, while performing data classification, monitoring, incident response, and policy tuning and mentoring junior team members. While DLP is the primary focus, the successful candidate will also support cybersecurity incident response and other initiatives across a range of security domains, making well-rounded cybersecurity knowledge essential, and will share in some on-call responsibilities. Duties and Responsibilities Lead efforts in designing, deploying, and maintaining enterprise Data Loss Prevention (DLP) solutions across endpoint, network, cloud, and email channels. Administer, configure, and optimize Microsoft Purview and Varonis to classify, monitor, and protect sensitive and regulated data. Configure and manage Microsoft Purview Insider Risk Management to detect, investigate, and mitigate risky user activity and potential insider threats. Design and enforce email DLP policies to prevent the unauthorized transmission of PHI and other sensitive data via email and other messaging channels. Implement and manage data protection across cloud environments such as AWS, leveraging cloud security tools such as Wiz to discover, classify, and safeguard sensitive data and remediate data exposure risks. Develop, enforce, tune, and continuously improve DLP policies, rules, and data classification schemes to minimize false positives and data exfiltration risk. Investigate, triage, and respond to DLP alerts and data loss incidents, including root cause analysis and remediation in coordination with privacy, compliance, and legal teams. Work as part of a dynamic team responsible for cybersecurity incident response and other initiatives across a range of security domains, participating in the investigation, containment, and remediation of security incidents. Participate in a rotating on-call schedule to support incident response and time-sensitive security events outside of standard business hours. Collaborate with teams throughout ISS, as well as Privacy and Compliance, to ensure the protection of PHI and adherence to HIPAA and other regulatory requirements. Provide mentorship and guidance to junior and mid-level cybersecurity engineers. Participate in the development and implementation of cybersecurity strategies and policies. #J-18808-Ljbffr