Endpoint and Data Security Engineer

191 Altera Corporation; San Jose (CA); Sur place; USD 150 000 - 210 000; Plein temps

Résumé du poste

191 Altera Corporation seeks an experienced Endpoint and Data Security Engineer to manage Defender, Purview DLP, and Securiti.ai platforms across enterprise environments. You will strengthen endpoint protection, threat detection, data loss prevention, and sensitive data security while supporting incident response and continuous security improvements.

You will lead onboarding for new business units and technologies, optimize security controls, and collaborate with SOC and governance teams to

Qualifications

• Experience administering and optimizing Defender and Purview platforms across enterprise environments.
• Ability to design and maintain security controls, policies and automated responses.
• Knowledge of incident response, threat hunting, and risk remediation processes.

Responsabilités

• Administer and optimize the Defender Security Platform suite and related controls.
• Design and tune DLP policies and data protection across endpoints and cloud apps.
• Operate DSPM with Securiti.ai for data discovery and risk management.
• Monitor alerts, assist with investigations, and support remediation efforts.
• Contribute to security governance, compliance activities, and policy improvements.

Connaissances

Endpoint protection

Threat detection

Data security

Incident response

Outils

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Microsoft Defender for Identity

Microsoft Defender for Cloud Apps

Microsoft Defender Vulnerability Management

Microsoft Defender XDR

Microsoft Purview

Securiti.ai

Purview Data Loss Prevention (DLP)

Description du poste

About the Role

Altera is seeking an experienced Endpoint and Data Security Engineer to manage and optimize Microsoft Defender, Microsoft Purview DLP, and Securiti.ai platforms. This role will strengthen endpoint protection, threat detection, data loss prevention, and sensitive data security across enterprise environments while supporting incident response, compliance, and continuous security improvement.

Microsoft Defender Security Platform Engineering

Administer, configure, and optimize the Microsoft Defender Security suite, including: Microsoft Defender for Endpoint Microsoft Defender for Office 365 Microsoft Defender for Identity Microsoft Defender for Cloud Apps Microsoft Defender Vulnerability Management Microsoft Defender XDR Microsoft Defender for Cloud. Develop and maintain endpoint protection policies, threat detection capabilities, attack surface reduction controls, and automated response workflows. Monitor platform health, security coverage, incidents, alerts, and detection effectiveness. Configure and maintain endpoint protection, endpoint detection and response (EDR), device control, web protection, email security, identity protection, and cloud application security controls. Improve threat detection fidelity while reducing false positives and operational overhead. Support threat hunting, incident investigation, and remediation activities. Lead security onboarding efforts for new business units, applications, and technologies.

Data Loss Prevention (Microsoft Purview)

Design, implement, and administer Microsoft Purview Data Loss Prevention controls across: Endpoints Microsoft 365 Exchange Online SharePoint Online OneDrive Microsoft Teams Cloud applications. Develop and maintain DLP policies protecting intellectual property, confidential data, regulated information, and business-critical assets. Support data classification, sensitivity labeling, encryption, retention, and information protection programs. Monitor policy violations, investigate incidents, and coordinate remediation activities. Partner with business stakeholders to align data protection controls with operational requirements. Develop reporting and analytics related to DLP effectiveness, violations, trends, and risk exposure. Continuously optimize policy tuning, exception management, and user experience.

Data Security Posture Management (DSPM)

Administer and optimize the Securiti.ai platform to identify, classify, monitor, and secure sensitive enterprise data. Support enterprise-wide data discovery initiatives across: Structured and unstructured data repositories Cloud storage platforms Collaboration environments Enterprise applications Data lakes and databases. Monitor data security posture and identify risks involving: Sensitive data exposure Data overexposure Excessive permissions Data residency concerns Regulatory compliance gaps. Develop remediation plans for identified data security risks. Partner with data owners, information governance teams, privacy teams, and security stakeholders to improve overall data protection maturity. Support continuous compliance initiatives related to data governance and security requirements.

Security Operations and Incident Response

Monitor and triage endpoint and data security alerts generated through Microsoft Defender, Microsoft Purview, and Securiti.ai. Assess security events to determine potential impact to endpoint, data, and information protection controls. Collaborate with SOC and Incident Response teams by providing platform expertise, investigation support, relevant telemetry, and technical context. Support incident investigations and remediation activities for events within the Endpoint and Data Security team’s remit. Assist with containment, recovery, root-cause analysis, and corrective actions as directed by SOC or Incident Response leadership. Analyze recurring alerts, attack trends, policy violations, and control gaps to recommend improvements across Defender, Purview DLP, and Securiti.ai.

Security Engineering, Governance & Compliance

Establish security standards, procedures, and technical controls supporting endpoint and data protection programs. Support security audits, assessments, customer assurance reviews, and regulatory compliance initiatives. Maintain documentation, control evidence, security baselines, and operational procedures. Track remediation plans, exceptions, findings, and risk acceptance decisions. Contribute to Zero Trust security initiatives and enterprise security transformation efforts.

Metrics