Lead Cyber Security Operations Engineer

• Lead the review and management of DLP alerts.
• Oversee DLP event investigations and manage escalations.
• Identify opportunities for DLP ruleset tuning and implement suggested improvements.
• Enhance technology infrastructure and refine processes for effective incident response.
• Create and update operational runbooks and response procedures.
• Develop and implement DLP strategies and policies aligned with overall cybersecurity goals and healthcare regulations.
• Perform root cause analysis, identifying attack vectors and indicators of compromise.
• Deliver clear verbal and written reports to senior management, providing insights and recommendations to enhance data protection.
• Ensure compliance with healthcare regulations and industry standards, such as HIPAA, GDPR, and ISO 27001.
• Stay informed on the latest cybersecurity and DLP trends and technologies to continually improve defenses.
• Work closely with other cybersecurity teams to align DLP strategies with broader security goals and healthcare-specific requirements.
• Mentor and guide junior cybersecurity engineers, promoting continuous learning and improvement.
• Participate in the on-call rotation (including weekends) to maintain continuous operations.
• Lead internal incident response drills and exercises.

• 6+ years of experience in DLP, data classification, or data protection, preferably in healthcare.
• Experience with Unix/Linux/Windows operating systems.
• Excellent written and verbal communication skills, with the ability to present technical information to both technical and non-technical audiences, including senior management.
• Bachelor’s or Master’s Degree in Cybersecurity, Risk Analysis, Computer Science, Information Systems, or a related field, or equivalent experience.
• Strong analytical and problem-solving skills, with the ability to think critically and make decisions under pressure.
• Proven ability to lead and work independently or within a team in a fast-paced environment.
• In-depth knowledge of data protection and cybersecurity regulations and standards (e.g., GDPR, CCPA, HIPAA, ISO 27001).

Nice to have:

• Experience with Shell/Bash/Python.
• Hands-on experience with SIEM, IDS/IPS, EDR, and other security technologies.
• Relevant certifications (e.g., CISSP, CISM, CEH, GIAC) are a plus.