Senior Cloud Data Security Engineer, Data Loss Prevention (DLP)

CVS Health

Confirmed live today High trust
Closes in 4 days Hybrid

Quick summary

Work type
Hybrid
Location
RIOHTXGAWVMDMAMNMIORNYILDCFLCTPANJDE
Salary
$101,970–$203,940 / yr
Employment
Full-time
Posted
69 days ago
Freshness
Confirmed live today
Closes
Oct 31, 2026 (soon)

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $183k
This role $153k
$87k $240k
below market most similar roles pay here above market

This role pays less than 72% of similar roles. Most pay $149,500–$216,000 — the blue band above. At the midpoint, this role pays about $153k versus about $183k for comparable roles.

Based on 240 similar postings.

Employer

About CVS Health

CVS Health is a leading American healthcare company operating retail pharmacies, pharmacy benefit management services, and a health insurance segment through Aetna, one of the nation''s largest health insurers. Industry: Healthcare & Pharmacy

CVS Health currently has 119 open roles on FindRole.

Listed pay typically runs $106,605–$260,590 across 115 roles with salary data.

Most-posted roles

View all roles at CVS Health

At a glance

TL;DR · Senior Cloud Data Security Engineer, Data Loss Prevention (DLP)

The Senior Cloud Data Security Engineer – Data Loss Prevention (DLP) serves as a senior member of the Data Protection Team, safeguarding sensitive assets within a complex, regulated healthcare environment. This role involves designing, implementing, and maturing enterprise-wide data protection capabilities for Data in Motion, Data in Use, and cloud-hosted data. Key responsibilities include leading DLP programs across cloud, endpoint, email, network, SaaS, and AI/ML ecosystems to prevent unauthorized disclosure of PHI, PII, and PCI. You will build automated detection, data classification, and labeling initiatives while securing AI-enabled processes and MLOps pipelines. Required expertise includes AWS, Azure, and GCP, alongside tools like Microsoft Purview, CASB, CNAPP, CSPM, SASE, and DSPM. You will ensure compliance with NIST, CIS, CSA, HIPAA, PCI-DSS, and MITRE ATLAS frameworks.

What you'll do

  • Design and mature enterprise Data Loss Prevention (DLP) strategies across cloud, endpoint, email, and network platforms.
  • Lead the end-to-end DLP lifecycle including data classification, policy development, rule tuning, and incident investigation.
  • Architect cloud data protection capabilities for AWS, Azure, and GCP using tools like Microsoft Purview and CASB.
  • Implement data protection controls for AI/ML platforms, generative AI solutions, and MLOps pipelines to prevent unauthorized data exposure.
  • Develop dashboards and metrics to measure DLP effectiveness and automate policy enforcement and alert triage.
  • Serve as the enterprise subject matter expert for cloud data security and AI/ML data protection.
  • Partner with internal stakeholders to define security standards and roadmap priorities aligned with regulatory requirements.

What we're looking for

  • 5+ years of experience designing, implementing, and supporting enterprise cloud security and data protection solutions with a focus on DLP.
  • 5+ years of hands-on expertise administering and optimizing enterprise DLP platforms such as Microsoft Purview, Zscaler, or Palo Alto.
  • 5+ years of experience creating and enforcing DLP policies across cloud, endpoint, email, network, SaaS, and collaboration platforms.
  • 5+ years of experience implementing security and data protection controls across at least two major cloud platforms including AWS, Azure, and/or GCP.
  • 5+ years of practical experience leveraging Zero Trust principles, CASB, CSPM, CNAPP, and Conditional Access.
  • 5+ years of experience managing data classification and governance for PHI, PII, PCI, and proprietary data.
  • 5+ years of experience partnering with stakeholders to investigate security incidents and perform root cause analysis.
  • Bachelor’s degree from an accredited university or equivalent work experience (HS diploma + 4 years relevant experience).

More like this

Similar roles

Senior Data Security Engineer

Allstate

Remote (IL) 70 days ago $90,700–$190,000
Data Loss Prevention (DLP) Microsoft Purview Microsoft 365 DevSecOps Policy-as-Code Security-as-Code Infrastructure as Code (IaC) CI/CD Python PowerShell Terraform Bicep YAML JSON REST APIs CASB Defender for Cloud Apps SIEM SOAR Cloud Security Data Governance Data Classification
4+ yrs exp Remote

Data Loss Prevention Engineer, Senior

Booz Allen Hamilton

Scott AFB, IL 122 days ago
Forcepoint Data Loss Prevention (DLP) Trellix Microsoft Symantec CASB SIEM SOAR Splunk McAfee Palo Alto Firewalls Proxies Network Protocols Cloud Security Gateways API Integration DoD Cybersecurity Compliance

Data Security Engineer, Senior

Booz Allen Hamilton

Colorado Springs, CO +2 125 days ago $86,800–$198,000
Data Security Posture Management (DSPM) Data Loss Prevention (DLP) Zero Trust Hybrid Cloud Varonis BigID Forcepoint Trellix Symantec Purview Fortra Titus Containerization Trusted Data Format (TDF) Attribute Based Access Control (ABAC) Virtru Keycloak
3+ yrs exp

Principal Cyber Sec Eng, DLP / Data Protection

Northern Trust

Chicago, IL 28 days ago $137,400–$233,600
Microsoft Purview Zscaler Data Loss Prevention (DLP) Microsoft Entra ID Active Directory Azure Information Protection (AIP) Microsoft Information Protection (MIP) Microsoft Defender for Cloud Apps Database Activity Monitoring (DAM) Symantec DLP Data Security Posture Management (DSPM) Encryption PCI-DSS SOX FFIEC Network Security Firewalls Proxies

Lead Infrastructure Security Engineer, CASB and DSPM

Prudential Financial

Newark, NJ 36 days ago $133,600–$220,400
CASB DSPM Microsoft 365 Z Scaler Azure AWS Entra ID Splunk Microsoft Defender for Cloud Apps SIEM SOAR PowerShell Python DLP IAM Zero Trust API Integration GDPR HIPAA CCPA
7+ yrs exp

Data Loss Prevention Engineer

Booz Allen Hamilton

Scott AFB, IL 122 days ago
Forcepoint Data Loss Prevention (DLP) CASB SIEM SOAR Splunk Palo Alto Trellix Symantec McAfee Firewalls Proxies Network Protocols Cloud Security Gateways API Integrations DoD Cybersecurity Compliance