Senior Security Operations Engineer
Skills
Software As A ServiceBusinessInfraredMean StackOperationsPreventionPython
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 5+ years of hands-on experience in security operations incident response or security engineering with strong data protection and DLP focus
- Direct hands-on experience deploying tuning and operating DLP tools across endpoint network SaaS and/or cloud environments
- Experience with CASB or similar SaaS security controls in production
- Ability to integrate DLP signals into SIEM/SOAR workflows such as CrowdStrike Splunk or Sentinel
- Advanced scripting and automation skills in Python PowerShell KQL or SQL
- Experience designing and maintaining data classification and policy frameworks for PHI PII PCI and other sensitive data
Day to day
- Lead the response to DLP and data security incidents with thorough investigation containment remediation and root cause analysis.
- Own the deployment configuration and continuous tuning of DLP controls across endpoints network egress SaaS applications and cloud storage.
- Build refine and automate response playbooks workflows and detection logic that reduce manual effort and improve response speed.
- Perform proactive hunting for anomalous data movement and track DLP metrics to improve coverage detection quality and false positive rates.