Senior Security Operations Engineer

🕒 August 18

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🛡️ Security Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Included Health

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏥 Healthcare

☁️ SaaS

👥 HR Tech

Healthcare • SaaS • HR Tech

Included Health is a healthcare technology company that delivers personalized, employer- and health-plan-focused primary, urgent, and behavioral health care through a single app and a network of virtual and in-person services. It blends AI-driven tools and human care teams to provide 24/7 care coordination, billing and claims advocacy, second opinions from leading specialists, and mental-health support, with the goal of lowering employer healthcare costs and improving member experience and inclusivity.

📋 Description

• Design, implement, and improve Data Loss Prevention (DLP) protections across corporate and cloud environments • Lead hands-on deployment and tuning of endpoint, network, SaaS, and cloud DLP controls • Investigate, contain, remediate, and perform root cause analysis for suspected data exfiltration and improper data handling incidents • Own the operational lifecycle of the DLP stack, including policies, rules, classifications, and continuous tuning • Partner with stakeholders to validate business-safe controls against security, usability, regulatory, and client requirements • Build and refine automated response playbooks and workflows to enrich, triage, and respond to alerts • Proactively hunt for anomalous data movement across unusual destinations, channels, or volumes • Define and track DLP metrics including coverage, detection quality, MTTD/MTTR, and false positive rate • Communicate progress to security leadership and cross-functional partners • Contribute to incident response and vulnerability management where they intersect with data protection

🎯 Requirements

• Minimum 5+ years of hands-on experience in security operations, incident response, or security engineering, with strong emphasis on data protection and DLP • Hands-on experience deploying, tuning, and operating DLP tools across endpoint, network, SaaS, and/or cloud environments • Production experience with Cloud Access Security Broker (CASB) or similar SaaS security controls • Experience integrating DLP signals into SIEM/SOAR workflows, such as CrowdStrike, Splunk, or Sentinel • Advanced scripting and automation skills using Python, PowerShell, KQL, and/or SQL • Experience designing and maintaining data classification and policy frameworks for PHI, PII, PCI, and other sensitive data types