Apex Systems
## Job Description# Cyber Security EngineerWe’re seeking a senior cybersecurity engineer to design, build, and operationalize enterprise grade‑ **data protection** capabilities anchored in **Microsoft E5**. You will lead engineering for **Microsoft Purview** (Information Protection & DLP, eDiscovery/Audit), **Sensitivity Labels**, and related guardrails—integrating telemetry and enforcement through **Zscaler**, **CrowdStrike**, and **Splunk**. This role bridges secure-by-default platform engineering with pragmatic automation to protect regulated data (e.g., PHI/PII) at scale. Senior leadership has prioritized accelerating Copilot and E5 controls adoption, creating a high impact‑ opportunity to shape how we protect data across SaaS and AI workloads. * Work with PSO, IAM, and Insider Risk to align label taxonomy and enforcement with business workflows and least‑privilege access.* Provide technical leadership and mentoring for engineers/analysts rolling out new E5 features and operational support.* Proven expertise building **policy‑as‑code** for DLP/labels (GitHub/Azure DevOps), and automating Graph/PowerShell administration.* Demonstrated ability to design secure-by-default guardrails and support rapid SaaS/AI adoption (including Copilot) without compromising compliance.- 5+ years engineering experience in enterprise security or platform engineering; hands-on‑ with **Microsoft E5**security stack (Purview DLP, Information Protection, eDiscovery).* Strong background in **data protection** for regulated data (PII/PHI), insider‑risk detection, and evidence‑driven investigations.* Familiarity with MCAS/Defender for Cloud Apps, conditional access policies, and SSPM evaluations.* Background in HIPAA/PHI audit support and exception governance workflows.- Production experience with **Zscaler** (SSE/ZIA/ZPA), **CrowdStrike** (Falcon APIs/telemetry), and **Splunk** (TA configs, CIM, correlation searches).- Experience migrating from legacy DLP (e.g., **Forcepoint**) to Microsoft DLP; building vendor‑neutral dictionaries and detection logic.
#J-18808-Ljbffr