Microsoft Purview Information Protection Engineer

Merck; New Jersey; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Merck is seeking a security professional to join the Information Protection Team, focusing on Microsoft Purview and DLP engineering. The role involves configuring, tuning, and maintaining information protection technologies and assisting with remediation of data leakage incidents.

You will collaborate with Legal, HR, and other business units to enforce data protection policies and improve incident response workflows using automation and scripting skills.

Qualifications

• Formal training with college courses or certifications in Computer Science/Information Security.
• Minimum of three (3) years experience in Cyber Security roles.

Responsibilities

• Design, build, test, and deploy DLP policies across network, endpoint, and cloud environments.
• Develop automation scripts to improve incident response and reporting accuracy.
• Maintain information protection tech stack for high availability and detection accuracy.
• Evaluate and improve security processes to adapt to evolving threats.
• Collaborate with Global Security, Legal, HR, and business units to respond to data loss risks.
• Create and review security dashboards and metrics reports.

Skills

DLP concepts

Incident response

Python

PowerShell

Networking TCP/IP

Cloud security

Analytical thinking

Written communication

Team collaboration

SIEM

Education

Bachelor's degree in Computer Science or Information Security

Tools

Microsoft Purview

Zscaler

CrowdStrike

Job description

Job Description

Job Summary

As a key member of the Information Technology Risk Management and Security (ITRM&S) organization, the successful candidate will act as a core member of the Information Protection Team primarily working within the Microsoft Purview Platform. This is a hybrid role featuring a dual focus on both operational DLP engineering to protect company data, and other DLP practices. The candidate will be responsible for configuring, tuning, and maintaining the information protection technologies and assisting with managing and assisting with the remediation of instances of sensitive data leakage and insider risk events.

Responsibilities

• Design, build, test, and deploy new DLP policies, rules, and logic across network, endpoint, and cloud environments to address emerging risks and align with the company's data protection strategy.
• Develop, implement, and maintain automation scripts and processes (e.g., using Python or PowerShell) to improve incident response workflows, reduce manual effort, and enhance reporting accuracy.
• Support the maintenance, enhancement, and troubleshooting of the information protection technology stack to ensure high availability, accurate detection, and optimal platform performance.
• Continuously evaluate, improve, and challenge existing processes, procedures, and technical controls to adapt to a fast-moving and evolving security environment.
• Collaborate closely with the Global Security Group, Legal, Human Resources, and other business units to respond to data loss prevents needs within established corporate policies.
• Create, modify, and review security dashboards and metrics reports to provide actionable insights into the organization's overall data risk posture.
• Ability to investigate, analyze, and manage security incidents generated from Data Loss Prevention (DLP) and other information protection tools, utilizing log analysis, data visualization, and pattern analysis.

Position Qualifications

Education Minimum Requirement

Formalized training, in the form of college course work or industry recognized training courses and certifications, in Computer Science, Information Security, or Computer Information Systems and related experience using Microsoft Purview Platform Minimum of three (3) years experience in Cyber Security roles

Required Experience and Skills

• Proven experience in an information security discipline, with a professional background that includes both active incident response and technical platform implementation.
• Strong, practical experience with Data Loss Prevention (DLP) concepts, methodologies, and enterprise-grade tools.
• Demonstrated ability to independently investigate and resolve complex security incidents (Tier 2/3 support levels), including performing in-depth root cause analysis.
• Hands‑on experience with scripting or programming languages (e.g., Python, PowerShell) specifically applied to automation, data extraction, or system integration.
• Excellent analytical, problem‑solving, and written/verbal communication skills, with the ability to convey technical risks to non-technical stakeholders.
• Strong foundational understanding of networking protocols (TCP/IP), operating system architectures, and cloud security principles.
• Ability to work effectively in a collaborative team environment, manage shifting priorities, and balance operational emergencies with project-based engineering tasks.

Desired Experience and Skills

• Microsoft Information Security Administrator, CISSP, Certified Information Security Manager (CISM), Certified Information Professional (CIP) or Insider Risk certifications preferred
• Willingness to actively seek and maintain industry information protection certifications, up‑to‑date knowledge of the current global data protection landscape, privacy regulations, and emerging security threat trends.
• Direct experience with specific DLP and security solutions for network, endpoint, and cloud environments (e.g., Microsoft 365 Purview, Zscaler, CrowdStrike).
• Experience proactively creating, testing, tuning, and deploying detection policies within security platforms.
• Proven ability to build strong, trusted relationships with cross‑functional business and technology stakeholders.

Required Skills

• Adaptability, Analytical Thinking, Cyber Threat Hunting, Cyber Threat Intelligence, Data Loss Prevention (DLP), Detail‑Oriented, Digital Forensics, Incident Response Management, Insider Threat Mitigation, Log Analysis, Malware Analysis, Security Information and Event Management (SIEM), Security Monitoring, Security Operations, SLA Management, Team Collaboration, Vulnerability Assessments, Vulnerability Management, Written Communication

US and Puerto Rico Residents Only:

Our company is committed to inclusion, ensuring that candidates can engage in a hiring process that exhibits their true capabilities.