Senior Security Engineer - Data Loss Prevention (DLP)

CVS Health•Woonsocket, RI

About The Position

CVS Health is hiring a Senior Security Engineer to join the Data Security team within Enterprise Technology. The team protects sensitive customer, colleague, and business information across a large healthcare organization and supports data protection capabilities that enable secure operations while safeguarding regulated information. This hands-on engineering role advances the enterprise information protection strategy by designing, implementing, and continuously improving Data Loss Prevention (DLP) controls across cloud and endpoint environments. The engineer works with Microsoft Purview, Exchange Online, Endpoint DLP, Zscaler, and Palo Alto, and collaborates with cybersecurity, infrastructure, privacy, compliance, and business teams to address data protection challenges, improve detection accuracy, reduce operational risk, and strengthen security outcomes. The role also involves enterprise cloud security architectures, automation, security analytics, and programs that protect sensitive healthcare and business data.

Requirements

At least 5 years of experience in DLP, data protection, cloud security, information security, or a related cybersecurity discipline.
Hands-on expertise designing, implementing, and supporting Microsoft Purview DLP capabilities, including Exchange Online, Endpoint DLP, data classification, sensitivity labeling, and policy tuning.
Proficiency developing and optimizing DLP policies, sensitive information types, content inspection controls, and Regex-based detection logic to improve coverage and reduce false positives.
Experience with enterprise security monitoring and analytics platforms such as Splunk, Chronicle, or comparable SIEM technologies.
Knowledge of networking, encryption, email security, and SSL/TLS.
Working knowledge of Microsoft Azure security capabilities and cloud security principles.
Proficiency with Python and/or PowerShell scripting to automate operational and engineering processes.
Bachelor’s degree from an accredited university or equivalent work experience; alternatively, a high school diploma/GED plus 4 years of relevant experience.

Nice To Haves

Microsoft SC-400 (Information Protection Administrator) certification.
Industry certifications such as CISSP, Security+, GIAC, CCSP, or equivalent cybersecurity certifications.
Experience supporting Zscaler, Palo Alto, or comparable secure access and network security platforms with integrated DLP capabilities.
Experience protecting PHI, PII, PCI, or other regulated data in healthcare, pharmacy, financial services, or other highly regulated industries.
Familiarity with Microsoft Information Protection (MIP), Insider Risk Management, data governance, privacy regulations, and enterprise information protection programs.

Responsibilities

Design, implement, and maintain enterprise DLP capabilities across Microsoft Purview, Exchange Online, and Endpoint DLP environments.
Develop, test, tune, and optimize DLP policies, classification rules, sensitivity labels, and detection logic, including Regex-based controls.
Partner with cybersecurity, privacy, compliance, infrastructure, and business stakeholders to implement technical controls and governance processes supporting security, compliance, and regulatory requirements.
Develop operational dashboards, reporting, and analytics using Power BI, Databricks, and related technologies to measure program effectiveness and identify opportunities for optimization.
Support incident investigations, operational troubleshooting, automation efforts, and continuous improvement across Microsoft Purview, Zscaler, and Palo Alto DLP technologies.