DLP & Insider Risk Security Engineer

First Horizon Bank; Memphis (TN); Presencial; USD 110.000 - 160.000; Jornada completa

Descripción de la vacante

First Horizon Bank is seeking a hands-on Data Security & Insider Risk Analyst to protect sensitive information across Microsoft 365, endpoints, and enterprise platforms. You will investigate and respond to DLP, insider risk, and endpoint events while tuning Purview policies to reduce risk.

The role combines security operations with platform engineering, translating security data into clear findings and practical controls for partners. Strong analytical skills and collaboration are essential.

Formación

• Experience in information security, data protection, security operations, incident response, threat analysis, or related disciplines.
• Working knowledge of DLP concepts, data classification, insider risk, and exfiltration paths.
• Ability to investigate alerts using evidence from users, devices, apps, email, and logs.
• Experience configuring/tuning security policies, detections, rules, or alerting logic in an enterprise environment.
• Strong analytical and problem-solving skills with clear communication.
• Ability to manage multiple investigations with careful documentation.

Responsabilidades

• Monitor, triage, investigate, and respond to DLP, insider risk, and endpoint alerts.
• Document findings with context and coordinate containment and remediation.
• Tune Purview DLP policies, rules, and notifications.
• Support DLP controls across Exchange, SharePoint, OneDrive, Teams, endpoints, and cloud apps.
• Review false positives/negatives and implement policy improvements.
• Support Insider Risk Management policies, alerts, cases, and workflows.
• Collaborate with identity, security, HR, and incident response teams during investigations.
• Use Purview, Defender, SentinelOne, Splunk, audit, and telemetry to build timelines and validate findings.
• Create dashboards and trend analyses on incident volume, policy effectiveness, and risk.
• Develop procedures, playbooks, tuning standards, and knowledge articles.

Conocimientos

DLP concepts

Data classification

Insider risk

Policy tuning

Incident response

Security analytics

Microsoft Purview

Microsoft Defender

Splunk SIEM

Power BI / Tableau

SQL / KQL

Microsoft 365 services

Educación

Bachelor's Degree

Herramientas

Microsoft Purview

Microsoft Defender

SentinelOne

Splunk SIEM

Power BI

Tableau

SQL

Kusto (KQL)

Excel

Descripción del empleo

First Horizon Bank is seeking a hands-on Data Security & Insider Risk Analyst to protect sensitive information across Microsoft 365, endpoints, and enterprise platforms. You will investigate and respond to DLP, insider risk, and endpoint events while tuning Purview policies to reduce risk.

The role combines security operations with platform engineering, translating security data into clear findings and practical controls for partners. Strong analytical skills and collaboration are essential.