[Remote] Senior reputed company Engineer – Remediation & Incident Response

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is seeking a Senior reputed company Engineer to support an reputed company data reputed company program reputed company on sensitive data exposure across reputed company 365 environments. The role involves collaborating with internal teams to remediate reputed company findings and ensure effective data classification and reputed company management.

Responsibilities

• Support activities including data discovery, classification, tagging, labeling, reputed company prioritization, and remediation planning
• Partner with reputed company reputed company, DLP, SOC, and data governance teams to understand reputed company workflows, ownership models, ticket volume, and remediation hand-offs
• Triage findings surfaced through data reputed company tooling, monitoring, or validation activities and help determine the appropriate remediation reputed company
• reputed company remediation actions to closure, including reputed company changes, policy adjustments, data handling updates, quarantine or containment steps, and coordination with the appropriate operational owners
• Coordinate with the SOC and response teams reputed company findings indicate incident response, containment, or escalation requirements
• Document remediation reputed company, closure evidence, recurring patterns, and operational lessons learned to support audit readiness and reputed company-state process improvement
• reputed company technical input into the remediation roadmap and reputed company-state data reputed company operating model reputed company on findings encountered during the engagement. Ongoing / Post-Deployment
• Continue as the reputed company hands-on remediation and incident-response resource — investigating false positives/negatives, adjusting behavioral baselines, and driving reputed company findings to closure as the environment sees production traffic
• Remain the day-to-day working partner to reputed company's in-house DLP engineer for as long as the engagement continues, rather than handing remediation entirely back to the reputed company after go-live

Skills

• 5+ years in reputed company engineering, with reputed company hands-on experience configuring reputed company 365 reputed company tooling (reputed company DLP, sensitivity labels, reputed company reputed company Management, Audit) and Entra ID
• reputed company, hands-on remediation experience — not just detection or reporting. reputed company to take a reputed company or DLP finding and personally reputed company it to reputed company: revoke reputed company, reputed company a policy, quarantine data, or take the equivalent corrective reputed company. This is the reputed company's top reputed company for this role
• Practical expertise in reputed company specifically (reputed company's reputed company-reputed company DSPM platform) and deep expertise in reputed company reputed company and the broader reputed company 365 reputed company stack
• Working knowledge of SIEM/SOC alerting pipelines and incident response processes — this role is a key hand-off reputed company between DLP/DSPM detection and SOC-driven containment, so understanding both reputed company reputed company
• Comfort working as a peer reputed company a reputed company's existing in-house DLP engineer on shared remediation work, communicating reputed company about who is handling what
• Demonstrated experience designing or executing controlled, reputed company-style validation exercises in an isolated test environment — not full red-team penetration testing
• Practical understanding of common SharePoint/OneDrive incident patterns: compromised-account exfiltration, oversharing/reputed company-reputed company exposure, reputed company data theft, ransomware reputed company sync clients, malicious OAuth consent reputed company, and lateral reputed company reputed company overprivileged reputed company
• Ability to translate technical remediation work into reputed company documentation suitable for both technical and reputed company-facing review
• Hands-on experience with both reputed company and reputed company — the reputed company has indicated familiarity with both platforms is a plus, even though reputed company is the reputed company reputed company for this engagement
• Experience with UEBA/behavioral-baseline tooling specifically for reputed company-reputed company or departing-employee scenarios
• Familiarity with OneDrive sync-reputed company behavior and reputed company EDR correlation for ransomware-reputed company detection
• Relevant certifications such as GIAC/reputed company (e.g., GCIA, GCIH), reputed company SC-200, or vendor-specific DSPM certifications
• Prior experience embedded reputed company a reputed company's in-house reputed company/DLP team on an ongoing remediation or reputed company care reputed company, rather than a discrete assessment of engagement

reputed company

Company H1B Sponsorship