Senior Cloud DLP & Data Protection Engineer

CVS Health; Providence (RI); On-site; USD 102,000 - 204,000; Full time

Job summary

CVS Health is seeking a Senior Cloud Data Security Engineer - Data Loss Prevention (DLP) to advance enterprise‑level data protection across cloud, endpoint, and collaboration platforms. You will design, implement, and mature DLP programs to safeguard PHI, PII, PCI and proprietary CVS Health data in a regulated environment.

Collaborating with Cybersecurity, Privacy, Compliance, Legal, and business teams, you will lead classifications, labeling, policy tuning, and incident remediation, while

Qualifications

• 5+ years designing and supporting enterprise cloud security and data protection with emphasis on DLP.
• 5+ years hands-on experience administering DLP platforms such as Microsoft Purview, Zscaler, Palo Alto, or equivalent.
• 5+ years creating, deploying, enforcing DLP policies across cloud, endpoint, email, network, SaaS, and collaboration platforms.
• 5+ years working with two major cloud platforms, including AWS, Azure, and/or GCP.
• 5+ years leveraging Zero Trust, CASB, CSPM, CNAPP, Conditional Access, and related cloud security frameworks.
• 5+ years data classification, information protection, and governance involving PHI, PII, PCI, confidential data.
• 5+ years partnering with stakeholders to investigate data security incidents, root cause analysis, and remediation activities.

Responsibilities

• Design and mature enterprise DLP strategies across cloud, endpoint, email, and network to protect sensitive data.
• Lead end-to-end DLP program lifecycle including classification, labeling, policy development, incident management, remediation, and continuous improvement.
• Architect cloud data protection across AWS, Azure, GCP, and hybrid environments using Purview, CNAPP, CSPM, SASE, and Zero Trust.
• Design and enforce data protection for AI/ML platforms, generative AI, LLMs, and MLOps to prevent data exposure.
• Develop dashboards, metrics, and executive reporting to measure DLP effectiveness and automate policy enforcement and response workflows.
• Partner with Cybersecurity, Privacy, Compliance, Legal, Risk Management, Infrastructure, Cloud Engineering, Data Engineering, Enterprise Architecture, and business stakeholders to align strategy with requirements.
• Serve as enterprise SME for DLP and data protection, guiding cloud transformations and AI deployments while aligning with NIST, CIS, CSA, HIPAA, PCI‑DSS, and MITRE ATLAS.

Skills

DLP design

Cloud security

Microsoft Purview

Zero Trust

CASB

CNAPP

AWS Azure GCP

Data governance

Education

Bachelor's degree

Tools

Splunk

Power BI

Chronicle

Job description

CVS Health is seeking a Senior Cloud Data Security Engineer - Data Loss Prevention (DLP) to advance enterprise‑level data protection across cloud, endpoint, and collaboration platforms. You will design, implement, and mature DLP programs to safeguard PHI, PII, PCI and proprietary CVS Health data in a regulated environment.

Collaborating with Cybersecurity, Privacy, Compliance, Legal, and business teams, you will lead classifications, labeling, policy tuning, and incident remediation, while