below marketmost similar roles pay hereabove market
This role pays less than
73%
of similar roles. Most pay
$151,231–$216,000
— the blue band above.
At the midpoint, this role pays about
$153k
versus about
$184k
for comparable roles.
Based on 240 similar postings.
Employer
About CVS Health
CVS Health is a leading American healthcare company operating retail pharmacies, pharmacy benefit management services, and a health insurance segment through Aetna, one of the nation''s largest health insurers. Industry: Healthcare & Pharmacy
CVS Health currently has
117 open roles
on FindRole.
Listed pay typically runs
$106,605–$260,590
across 114 roles with salary data.
The Senior Security Engineer - Data Loss Prevention (DLP) joins the Data Security team within Enterprise Technology to protect sensitive customer, colleague, and business information. This hands-on role involves designing, implementing, and maintaining enterprise DLP capabilities across cloud and endpoint environments. You will develop, test, and optimize DLP policies, classification rules, and sensitivity labels while improving detection accuracy and reducing operational risk. Key technologies include Microsoft Purview, Exchange Online, Endpoint DLP, Zscaler, and Palo Alto. You will also utilize Power BI, Databricks, Splunk, and Chronicle for reporting and analytics. The role requires proficiency in Python and PowerShell scripting to automate processes. You will solve complex data protection challenges to safeguard highly regulated information, including PHI, PII, and PCI, within a large-scale healthcare environment.
What does a Security Engineer earn?
Median $192050 from 105 postings across 38 companies.
Design, implement, and maintain enterprise Data Loss Prevention (DLP) capabilities across Microsoft Purview, Exchange Online, and Endpoint DLP.
Develop, test, tune, and optimize DLP policies, classification rules, sensitivity labels, and Regex-based detection logic.
Partner with stakeholders to implement technical controls and governance processes that support security and regulatory requirements.
Develop operational dashboards, reporting, and analytics using Power BI and Databricks to measure program effectiveness.
Support incident investigations, operational troubleshooting, and automation efforts across Zscaler and Palo Alto DLP technologies.
Use Python and PowerShell scripting to automate operational and engineering processes for data protection.
What we're looking for
5+ years of experience in Data Loss Prevention (DLP), data protection, cloud security, information security, or a related cybersecurity discipline.
Hands-on expertise designing, implementing, and supporting Microsoft Purview DLP capabilities, including Exchange Online, Endpoint DLP, data classification, and sensitivity labeling.
Proficiency developing and optimizing DLP policies, sensitive information types, content inspection controls, and Regex-based detection logic.
Experience with enterprise security monitoring and analytics platforms including Splunk, Chronicle, or comparable SIEM technologies.
Working knowledge of Microsoft Azure security capabilities and cloud security principles.
Proficiency in Python and/or PowerShell scripting to automate operational and engineering processes.
Bachelor’s degree from an accredited university or High School Diploma/GED plus 4 years of relevant experience.
Microsoft SC-400 (Information Protection Administrator) certification (preferred).
Industry certifications such as CISSP, Security+, GIAC, CCSP, or equivalent (preferred).
Experience supporting Zscaler, Palo Alto, or comparable secure access and network security platforms (preferred).
Experience protecting PHI, PII, PCI, or other regulated data types within highly regulated industries (preferred).
Data Loss Prevention (DLP)
Microsoft Purview
Microsoft 365
DevSecOps
Policy-as-Code
Security-as-Code
Infrastructure as Code (IaC)
CI/CD
Python
PowerShell
Terraform
Bicep
YAML
JSON
REST APIs
CASB
Defender for Cloud Apps
SIEM
SOAR
Cloud Security
Data Governance
Data Classification
Microsoft Purview
Zscaler
Island Browser
Data Loss Prevention
Cybersecurity
AI Security
Machine Learning
Security Engineering
Threat Modeling
Security Automation
Security Incident Management
CISSP
CISM
CRISC