Senior Cloud Data Security Engineer – Data Loss Prevention (DLP)
CVS Health2 days ago
Base Salary
$102k - $204k/yr
Responsibilities
- Design, implement, and mature enterprise DLP strategies, policies, and controls across cloud, endpoint, email, network, SaaS, and collaboration platforms.
- Lead the DLP lifecycle covering data classification, labeling, policy development, rule tuning, incident management, investigations, root cause analysis, remediation, and continuous improvement.
- Architect cloud data protection capabilities across AWS, Azure, GCP, and hybrid environments using DLP and cloud security technologies.
- Implement data protection controls for AI/ML platforms, generative AI solutions, LLMs, AI agents, MLOps pipelines, and shadow AI use cases.
- Develop DLP dashboards, metrics, risk indicators, executive reporting, and automated policy enforcement, alert triage, and response workflows.
- Partner with cybersecurity, privacy, compliance, legal, risk, infrastructure, cloud engineering, data engineering, architecture, and business stakeholders on data protection strategy and governance.
- Serve as the enterprise subject matter expert for DLP, cloud data security, and AI/ML data protection while supporting strategic transformation initiatives.
Requirements
- At least 5 years of experience designing, implementing, and supporting enterprise cloud security and data protection solutions with strong DLP experience.
- At least 5 years of hands-on experience administering and optimizing enterprise DLP platforms such as Microsoft Purview, Zscaler, Palo Alto, or equivalent technologies.
- At least 5 years of experience creating, deploying, and enforcing DLP policies across cloud, endpoint, email, network, SaaS, and collaboration platforms.
- At least 5 years of experience with at least two major cloud platforms, including AWS, Azure, and/or GCP.
- At least 5 years of experience with Zero Trust principles, CASB, CSPM, CNAPP, Conditional Access, and related cloud security frameworks.
- At least 5 years of experience with data classification, information protection, governance, security incident investigation, root cause analysis, and remediation.
- Preferred experience with advanced DLP detection logic using Regex, dictionaries, Exact Data Match, fingerprinting, security analytics, and reporting tools.
- Preferred experience with network security, email security, secure web gateway, proxy, and firewall technologies.
- Preferred experience securing AI/ML environments, LLMs, generative AI solutions, AI agents, and MLOps platforms.
- Preferred experience leading enterprise-scale DLP, information protection, or data security engineering initiatives.
- Ability to support mission-critical security platforms, including on-call rotations and off-hours or weekend support when required.
- Relevant certifications such as SC-400, SC-200, CCSP, CISSP, CCSK, AWS Security Specialty, or equivalent are preferred.
- Strong communication, stakeholder management, problem-solving, and technical influence skills are preferred.
- Bachelor’s degree from an accredited university or equivalent work experience; the posting also allows a high school diploma plus four years of relevant experience.
Benefits
- Full-time position with an anticipated schedule of 40 hours per week.
- Medical, dental, and vision coverage; paid time off; retirement savings options; wellness programs; and other eligibility-based resources.
- The application window is anticipated to close on November 30, 2026.
Tech Stack
Categories
About CVS Health
CVS Health is a U.S. health care company that operates thousands of retail pharmacies, runs the CVS Caremark pharmacy benefits manager, and owns the Aetna health insurance business. It sells prescriptions, retail health goods, and insurance plans, and provides primary and urgent care through MinuteClinic and other services for consumers, employers, and government programs. Founded in 1963 and headquartered in Woonsocket, Rhode Island, it is a public company traded on the NYSE.