Security Engineer: DLP, EDR & SOAR Incident Response

Intuitive; Peachtree Corners (GA); On-site; USD 90,000 - 130,000; Full time

Job summary

Intuitive is seeking an IT Security Analyst to join the security operations team, focusing on DLP, EDR, incident management orchestration, and security automation across Windows, macOS, and Linux.

The role requires tuning DLP policies, deploying EDR agents, building automated workflows with SOAR, and supporting ZTNA enforcement to strengthen the organization’s security posture. Collaboration with Detection Engineering and Incident Response is expected.

Qualifications

• Experience with data loss prevention (DLP), endpoint security (EDR), SOAR automation, and SIEM.
• Familiarity with zero trust network access (ZTNA) architectures and policies.
• Strong incident response coordination and policy enforcement skills.

Responsibilities

• Administer and tune DLP policies across endpoints and cloud apps.
• Deploy and troubleshoot EDR agents on Windows, macOS, and Linux.
• Build automated incident response workflows using SOAR platforms.
• Support ZTNA policy enforcement in coordination with Network Security.
• Investigate DLP alerts, perform root cause analysis, and document findings for audits.
• Classify and prioritize endpoint security events by severity and impact.
• Develop operational metrics and dashboards to track policy effectiveness and response performance.
• Collaborate with Detection Engineering to refine SIEM rules addressing bypass techniques and evasion.
• Support incident lifecycle with forensic data and automation assistance.

Job description

Intuitive is seeking an IT Security Analyst to join the security operations team, focusing on DLP, EDR, incident management orchestration, and security automation across Windows, macOS, and Linux.

The role requires tuning DLP policies, deploying EDR agents, building automated workflows with SOAR, and supporting ZTNA enforcement to strengthen the organization’s security posture. Collaboration with Detection Engineering and Incident Response is expected.