Note: The job is a remote job and is open to candidates in USA. AbbVie, including its Allergan Aesthetics portfolio, discovers and delivers innovative medicines and solutions for serious health issues. The Senior Data Loss Prevention Analyst will lead data loss investigations, develop and tune DLP controls across endpoint, network, and cloud environments, support DLP platform migration, and advise stakeholders on mitigating insider risk. The role also involves Splunk analytics, cross-functional investigations, documentation, and mentoring junior analysts.
Responsibilities
- Lead complex and sensitive data loss investigations from initial alert through documentation and closure, including cases involving potential insider risk
- Serve as the senior escalation point for the DLP team, providing guidance and second level review on cases requiring advanced analytical judgment
- Design, build, test, and tune DLP policies and detection rules in Microsoft Purview, balancing detection coverage against false positive volume
- Develop and maintain Splunk searches, correlation logic, dashboards, and reports to support DLP investigations, alert triage, and program metrics
- Continuously review the alert queue to identify tuning opportunities, detection gaps, and candidates for new use cases
- Correlate DLP telemetry with other data sources, endpoint, email, cloud, identity, and network logs to build complete pictures of potential data exfiltration
- Support the migration from the legacy DLP platform, including use-case mapping, policy translation, validation testing, and detection parity verification
- Partner with Legal, HR, Compliance, and Privacy on investigations requiring cross functional coordination, and prepare clear written findings for both technical and non-technical audiences
- Mentor junior analysts, document investigative procedures, and contribute to playbooks and runbooks that improve team consistency and efficiency
Skills
- Bachelor's Degree in Information Security, Computer Science or any related field and 6 years' experience; or Master's Degree and 5 years' experience; or PhD and 0 years' experience
- Respective years of experience in information security, with demonstrated years focused specifically on data loss prevention or insider risk
- Hands on experience with Microsoft Purview DLP including policy creation, rule tuning, and alert investigation across endpoint, email, and cloud channels
- Microsoft Purview Insider Risk Management experience is a strong plus
- Demonstrated Splunk experience, including writing SPL searches, building dashboards and correlation logic, and using Splunk to support security investigations
- Strong analytical and investigative skills, with a proven track record of working complex cases independently and reaching defensible conclusions from incomplete or ambiguous data
- Solid understanding of data classification, regulatory drivers (HIPAA, GDPR, PCI-DSS, or similar), and common data exfiltration methods
- Excellent written communication skills, with the ability to document investigative findings clearly for legal, HR, and executive audiences
- 5+ years in information security, with at least 3 years focused specifically on data loss prevention or insider risk
Benefits
- This position can be virtual anywhere in the U.S.
- Paid time off, including vacation, holidays, and sick leave
- Medical, dental, and vision insurance for eligible employees
- 401(k) for eligible employees
- Eligibility to participate in short-term incentive programs
Company Overview
Company H1B Sponsorship