Note: The job is a remote job and is open to candidates in USA. AbbVie is a biopharmaceutical company focused on discovering and delivering innovative medicines and solutions for serious health issues. The Senior Data Loss Prevention Analyst will lead data security control development, DLP investigations, policy tuning, telemetry analysis, platform migration, and collaboration with technical and cross-functional stakeholders to mitigate insider risk.
Responsibilities
- Lead complex and sensitive data loss investigations from initial alert through documentation and closure, including cases involving potential insider risk
- Serve as the senior escalation point for the DLP team, providing guidance and second level review on cases requiring advanced analytical judgment
- Design, build, test, and tune DLP policies and detection rules in Microsoft Purview, balancing detection coverage against false positive volume
- Develop and maintain Splunk searches, correlation logic, dashboards, and reports to support DLP investigations, alert triage, and program metrics
- Continuously review the alert queue to identify tuning opportunities, detection gaps, and candidates for new use cases
- Correlate DLP telemetry with other data sources, endpoint, email, cloud, identity, and network logs to build complete pictures of potential data exfiltration
- Support the migration from the legacy DLP platform, including use-case mapping, policy translation, validation testing, and detection parity verification
- Partner with Legal, HR, Compliance, and Privacy on investigations requiring cross functional coordination, and prepare clear written findings for both technical and non-technical audiences
- Mentor junior analysts, document investigative procedures, and contribute to playbooks and runbooks that improve team consistency and efficiency
Skills
- Bachelor's Degree in Information Security, Computer Science or any related field and 6 years' experience; or Master's Degree and 5 years' experience; or PhD and 0 years' experience
- Respective years of experience in information security, with demonstrated years focused specifically on data loss prevention or insider risk
- Hands on experience with Microsoft Purview DLP including policy creation, rule tuning, and alert investigation across endpoint, email, and cloud channels. Microsoft Purview Insider Risk Management experience is a strong plus
- Demonstrated Splunk experience, including writing SPL searches, building dashboards and correlation logic, and using Splunk to support security investigations
- Strong analytical and investigative skills, with a proven track record of working complex cases independently and reaching defensible conclusions from incomplete or ambiguous data
- Solid understanding of data classification, regulatory drivers (HIPAA, GDPR, PCI-DSS, or similar), and common data exfiltration methods
- Excellent written communication skills, with the ability to document investigative findings clearly for legal, HR, and executive audiences
- 5+ years in information security, with at least 3 years focused specifically on data loss prevention or insider risk
Benefits
- We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
- This job is eligible to participate in our short-term incentive programs.
- This position can be virtual anywhere in the U.S.
Company Overview
Company H1B Sponsorship