Senior Cybersecurity Engineer - Purview DLP & Insider Risk

SoCode Recruitment; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

SoCode Recruitment is seeking a Senior Cybersecurity Engineer to design, implement, and operate security controls across Microsoft 365, Azure, and endpoints in a remote US-based role. The initial focus is implementing Purview DLP, sensitivity labels, and Insider Risk Management with an external advisory partner while maintaining internal ownership.

Role expands to detection engineering, vulnerability management, cloud hardening, and privileged access management.

Qualifications

• 7+ years of cybersecurity engineering or security operations experience.
• 3+ years implementing Microsoft security tools in an enterprise.
• Proven experience with Microsoft Purview DLP and sensitivity labels.
• Knowledge of Microsoft Sentinel, KQL, and Logic Apps playbooks.
• Experience with Defender for Endpoint, Intune, and Entra ID, including CA and PIM.

Responsibilities

• Own the technical implementation of Microsoft Purview Endpoint DLP and Insider Risk Management, working with an external advisory partner.
• Lead configuration sessions, implement tenant changes directly, and take ownership of the resulting security controls.
• Deploy endpoint DLP across Windows, macOS, Edge, Chrome, and Firefox.
• Progress DLP policies through audit, warning, and blocking stages with testing and rollback procedures.
• Implement Insider Risk Management using HR data and signals with thresholds and investigation workflows.
• Expand sensitivity labels and automated labeling capabilities, integrating with DLP and Insider Risk policies.
• Configure security alerts and escalation processes with clear severity definitions and triage procedures.

Skills

Cybersecurity engineering

Security operations

KQL

PowerShell

Python

Cloud security

Education

Bachelor's degree in CS or related

Tools

Microsoft Purview DLP

Microsoft Sentinel

Microsoft Defender for Endpoint

Azure Policy

Entra ID

Job description

SoCode Recruitment is seeking a Senior Cybersecurity Engineer to design, implement, and operate security controls across Microsoft 365, Azure, and endpoints in a remote US-based role. The initial focus is implementing Purview DLP, sensitivity labels, and Insider Risk Management with an external advisory partner while maintaining internal ownership.

Role expands to detection engineering, vulnerability management, cloud hardening, and privileged access management.