Cloud & Data Security Engineer – EDR, CSPM & DSPM

Socket.dev; Lowell (MA); On-site; USD 95,000 - 154,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Employer-sponsored 401(k)

Paid time off

Professional development opportunities

Job summary

MACOM is seeking a Security Engineer – Cloud & Data to protect its critical intellectual property across cloud infrastructure, data repositories, and endpoints. The role combines hands-on security operations with defining architectural standards for data protection and threat telemetry.

You will spend most of your time on platform engineering tasks—EDR/DLP management, CSPM guardrails, and DSPM tooling—while also shaping strategic architecture for insider threat telemetry, data classification,

Qualifications

• 3–5 years of experience spanning cloud infrastructure, data protection, and enterprise endpoint security.
• Experience administering enterprise-grade EDR and data visibility platforms (e.g., CrowdStrike, Varonis, or equivalents).
• Working knowledge of Cloud environments (AWS/Azure) and Infrastructure-as-Code principles.
• Nice to Have: Basic familiarity with application security concepts and CI/CD pipeline automation (e.g., SAST/DAST, GitLab workflows).

Responsibilities

• Platform Engineering: Manage EDR and DLP agents, tune globally and deploy.
• Configure CSPM guardrails across AWS/Azure environments.
• Administer DSPM tools to lock down over-permissioned file shares and repositories.
• Advisor to DevOps on integrating security scanning into CI/CD pipelines.

Skills

Cloud infrastructure

Data protection

Endpoint security

Security operations

Tools

CrowdStrike

Varonis

Job description

MACOM is seeking a Security Engineer – Cloud & Data to protect its critical intellectual property across cloud infrastructure, data repositories, and endpoints. The role combines hands-on security operations with defining architectural standards for data protection and threat telemetry.

You will spend most of your time on platform engineering tasks—EDR/DLP management, CSPM guardrails, and DSPM tooling—while also shaping strategic architecture for insider threat telemetry, data classification,