Senior Cloud Data Security Engineer

This is a fully remote position, open to applicants in Ohio, +4 more states.

📋 Description

• Design, implement, and enhance enterprise Data Loss Prevention (DLP) policies and controls across cloud, endpoint, email, and network channels.

• Facilitate the complete DLP program lifecycle, encompassing strategy development, policy formulation, rule optimization, and ongoing enhancements.

• Spearhead data classification and labeling efforts for Personally Identifiable Information (PII), Protected Health Information (PHI), Payment Card Industry (PCI) data, and proprietary data.

• Monitor, investigate, and address data leakage incidents; manage cases, conduct root cause analyses, and drive remediation to completion.

• Create dashboards, metrics, and reports on DLP effectiveness, risk posture, and emerging trends.

• Automate DLP enforcement, incident triage, and response workflows.

• Extend DLP functionalities to cloud-native and hybrid environments utilizing Cloud Access Security Brokers (CASB), Cloud Native Application Protection Platform (CNAPP), Cloud Security Posture Management (CSPM), Secure Access Service Edge (SASE), and Zero Trust architectures.

• Lead the discovery of shadow AI and enforce DLP controls across both sanctioned and unsanctioned AI services.

• Design and implement data protection controls for AI/ML workloads, pipelines, model training, and outputs.

• Ensure secure data handling for generative AI, Large Language Models (LLMs), and MLOps platforms.

• Establish DLP strategy, roadmaps, and priorities in collaboration with business and technology leaders.

• Align DLP controls with NIST, CIS, CSA, and MITRE ATLAS frameworks.

• Act as a data protection subject matter expert during cloud migrations, AI platform deployments, and mergers & acquisitions activities.

• Collaborate with infrastructure, operations, data science, and application teams.

• Foster a low-friction, user-centric security experience.

• Serve as the organizational authority on DLP, cloud data security, and best practices for AI/ML data protection.

⛳️ Requirements

• 5+ years of experience in implementing and supporting cloud security solutions within large enterprise settings, with a primary emphasis on DLP.

• 5+ years of hands-on experience with enterprise DLP platforms including Microsoft Purview, Zscaler, and Palo Alto.

• 5+ years of experience in designing and enforcing DLP policies across cloud, endpoint, email, and network channels.

• 5+ years of experience with at least two cloud platforms: AWS, Azure, or GCP, including implementations focused on data protection.

• 5+ years of experience with Zero Trust, CASB, CSPM, and Conditional Access frameworks.

• 3+ years of experience utilizing Regex for DLP policies and tools such as Splunk, Chronicle, or Power BI for analytics.

• 3+ years of experience in network security, email security, and firewall technologies related to preventing data exfiltration.

• 3+ years of experience securing AI/ML platforms, including LLMs, generative AI, and MLOps, with a focus on data protection.

• Demonstrated experience in leading DLP and data protection engineering initiatives with cross-functional teams.

• Ability to provide off-hours and weekend support on short notice when necessary.

• Bachelor’s degree from an accredited institution or equivalent work experience.

• Alternatively, a high school diploma plus 4 years of relevant experience.

• Candidates must reside within the United States.

🏝️ Benefits

• CVS Health bonus, commission or short-term incentive program in addition to base pay.

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Paid time off.

• Retirement savings options.

• Wellness programs.

• Additional resources supporting physical, emotional, and financial well-being.

• Comprehensive benefits package available for colleagues and their families.

• Initiatives promoting diversity, inclusion, and belonging.

• Support for employees with military experience and military spouses.