Senior Information Security Engineer- DLP/Insider Threat

Stellenbeschreibung:

Senior Information Security Engineer - DLP/Insider Threat

Join us as we work to create a thriving ecosystem that delivers accessible, high-quality, and sustainable healthcare for all.

Employer work visa sponsorship and support are not provided for this role. Applicants must be currently authorized to work in the United States at hire and must maintain authorization to work in the United States throughout their employment with this company.

Position Summary

The Senior Information Security Engineer - DLP/Insider Threat helps protect athenahealth’s sensitive company, customer, workforce, and healthcare data. This role supports the operation and improvement of data loss prevention and insider risk capabilities across endpoint, email, SaaS, cloud, collaboration, identity, and security platforms.

This is a hands‑on, engineering‑focused role with an emphasis on tool configuration, alert tuning, technical troubleshooting, evidence quality, workflow improvement, and cross‑functional response.

About the Team

This team supports data protection and insider risk capabilities that help safeguard PHI, PII, confidential business data, intellectual property, credentials, and other sensitive or regulated information. The work spans security tooling, alert triage, investigations, policy tuning, and operational support in partnership with multiple security and business teams.

Essential Job Responsibilities

DLP and insider risk platform operations
Tooling, telemetry, and troubleshooting
Alert triage and investigation
Data exposure and control improvement
Process, reporting, and cross‑functional support
Team support and on‑call coverage

Expected Education & Experience

Bachelor’s degree or equivalent practical experience.
Strong foundational skills in operating system, hardware, software, and network troubleshooting.
Experience in information security, DLP, insider risk, UEBA, security operations, endpoint security, data/SaaS/AI security posture management, email security, or related technical security work.
Hands‑on experience administering, monitoring, or tuning enterprise security tools such as DLP, insider risk, UEBA, email security, endpoint security, cloud security posture, secrets detection, SIEM, or case management platforms.
Experience supporting data protection controls across cloud, SaaS, endpoint, email, repository, data storage, or AI‑enabled environments.
Experience analyzing alerts, logs, user activity, endpoint activity, email events, cloud findings, repository findings, or data movement patterns.
Experience administering end‑user computers and troubleshooting issues as they arise.
Helpful certifications or training may include Security+, GCIH, GCFE, CDPSE, CIPP/US, AIGP, CCSK, Microsoft SC-401, or insider risk training, but they are not required.

Required Knowledge & Skills

Knowledge of DLP, insider risk, UEBA, email security, cloud exposure, secrets detection, endpoint telemetry, and common exfiltration paths.
Ability to configure, tune, and troubleshoot tools such as Cyberhaven, Proofpoint, Orca, GitGuardian, CrowdStrike, Splunk, or similar platforms.
Understanding of PHI, PII, ePHI, confidential business data, intellectual property, credentials, and regulated data handling.
Ability to investigate alerts systematically, separate signal from noise, document findings, and elevate appropriately.
Strong judgment, discretion, and integrity when handling sensitive information.
Clear written and verbal communication skills for both technical and non‑technical stakeholders.
Ability to work independently, follow through on commitments, and manage competing priorities.
Familiarity with Microsoft Purview eDiscovery and ticketing systems such as ServiceNow and Jira.

Why This Role Matters

This role strengthens athenahealth’s ability to protect sensitive data, detect risk early, and respond effectively to insider threat and data loss scenarios. The work supports both security outcomes and business productivity through practical, well‑tuned controls.