Security Engineer II, Cyber Operations

What you'll do

• Administer, monitor, and maintain DLP technologies including Microsoft Purview and endpoint DLP.
• Triage and investigate DLP and Insider Risk alerts across email, cloud, and endpoint environments.
• Coordinate incident response, containment, and remediation with internal stakeholders and the MSSP.
• Develop and refine DLP policies, detection rules, runbooks, and case-management workflows.
• Create metrics and reports on alert volume, investigation aging, and policy effectiveness.
• Implement automation for repeatable tasks like alert enrichment and evidence collection using SOAR tools.
• Support broader Cyber Operations activities including complex security incident investigations and recovery coordination.
• Participate in a 24/7 on-call rotation to address security incidents and other assigned duties.

What we're looking for

• Bachelor’s Degree in a technical discipline or equivalent educational background with professional-level security certifications.
• Minimum three years of mid-level Cybersecurity experience at an analyst or engineer level.
• Previous experience leading, supporting, managing, and administering at least one application.
• Previous experience leading security projects and initiatives.
• Previous healthcare experience in an IT or Security capacity.
• Industry-recognized technical or professional security certification.
• Demonstrated in-depth knowledge of information security principles, practices, solutions, and capabilities (preferred).
• Experience with HIPAA, NIST, and project management (preferred).