Microsoft Purview Information Protection Engineer

MSD•Rahway, NJ

1d•$79,200 - $124,700•Hybrid

About The Position

As a key member of the Information Technology Risk Management and Security (ITRM&S) organization, the successful candidate will be a core member of the Information Protection Team, primarily working within the Microsoft Purview Platform. This hybrid role focuses on operational DLP engineering to protect company data and other DLP practices. The candidate will configure, tune, and maintain information protection technologies and assist with managing and remediating sensitive data leakage and insider risk events.

Requirements

Formalized training through college coursework or industry-recognized training courses and certifications in Computer Science, Information Security, Computer Information Systems, or a related area, and related experience using the Microsoft Purview Platform.
At least three years of experience in cybersecurity roles.
Professional information security experience that includes active incident response and technical platform implementation.
Practical experience with DLP concepts, methodologies, and enterprise-grade tools.
Ability to independently investigate and resolve complex security incidents at Tier 2/3 support levels, including in-depth root cause analysis.
Hands-on experience with scripting or programming languages such as Python or PowerShell for automation, data extraction, or system integration.
Strong analytical, problem-solving, written communication, and verbal communication skills, including the ability to convey technical risks to non-technical stakeholders.
Foundational understanding of TCP/IP networking protocols, operating system architectures, and cloud security principles.
Ability to work collaboratively, manage shifting priorities, and balance operational emergencies with project-based engineering tasks.
Skills listed: Adaptability, Analytical Thinking, Cyber Threat Hunting, Cyber Threat Intelligence, Data Loss Prevention (DLP), Detail-Oriented, Digital Forensics, Incident Response Management, Insider Threat Mitigation, Log Analysis, Malware Analysis, Security Information and Event Management (SIEM), Security Monitoring, Security Operations, SLA Management, Team Collaboration, Vulnerability Assessments, Vulnerability Management, and Written Communication.

Nice To Haves

Microsoft Information Security Administrator, CISSP, Certified Information Security Manager (CISM), Certified Information Professional (CIP), or Insider Risk certifications.
Willingness to pursue and maintain industry information protection certifications and keep current with the global data protection landscape, privacy regulations, and emerging security threats.
Direct experience with DLP and security solutions for network, endpoint, and cloud environments, such as Microsoft 365 Purview, Zscaler, and CrowdStrike.
Experience creating, testing, tuning, and deploying detection policies within security platforms.
Ability to build strong, trusted relationships with cross-functional business and technology stakeholders.

Responsibilities

Design, build, test, and deploy DLP policies, rules, and logic across network, endpoint, and cloud environments to address emerging risks and align with the company's data protection strategy.
Develop, implement, and maintain automation scripts and processes, such as with Python or PowerShell, to improve incident response workflows, reduce manual effort, and enhance reporting accuracy.
Maintain, enhance, and troubleshoot the information protection technology stack to support high availability, accurate detection, and optimal platform performance.
Evaluate and improve existing processes, procedures, and technical controls to adapt to an evolving security environment.
Collaborate with the Global Security Group, Legal, Human Resources, and other business units to respond to data loss prevention needs within corporate policies.
Create, modify, and review security dashboards and metrics reports to provide actionable insights into the organization's data risk posture.
Investigate, analyze, and manage security incidents generated from DLP and other information protection tools using log analysis, data visualization, and pattern analysis.