Bring your heart to CVS Health. Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand - with heart at its center - our purpose sends a personal message that how we deliver our services is just as important as what we deliver.

Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable. Position Summary The Senior Security Engineer, Data Protection, is a pivotal member of the Data Integration Team and the Information & Technology Solutions organization and will play a crucial role in safeguarding the digital information assets of one of the largest pharmacy chains in the United States. This position is primarily focused on Data in Motion and in Use (DIM and DIU), encompassing both cloud and on-premises compute environments (hybrid model). As a security engineer, you will collaborate horizontally and vertically with various technical teams, business units, and leadership, to provide world class data protection solutions for our customers data.Primary Job Duties & Responsibilities:

• Design, implement and support next generation data protection capabilities leveraging frameworks and technology such as DLP, CASB, Proxy, Encryption, and Zero Trust to secure data across hybrid environments.
• Develop, test and deploy security policies and rules set(s), tuning to reduce false positives as needed.
• Analyze events to identify gaps in data handling not in line with existing policy.
• Develop and maintain tool dashboards, metrics, and issue tracking systems.
• Provide security engineering support for projects, mergers and acquisitions and cross company operations.
• Perform continuous improvement activities on tool suites, rules sets and policies to incorporate lessons learned and best practices for emerging threats.
• Develop an understanding of the needs and requirements of the organization, utilizing a risk-based approach to implement best practices to ensure the security of the data and minimize loss.
• Periodic risk assessment of existing protection strategies, making necessary recommendations and/or changes if weaknesses are identified.
• Continuously drive a simplified, consistent user experience, preventing downtime and building trust between the end user and business partners.
• Provide root cause analysis (RCA) for operational outages.
• Collaborate with cross-functional teams, including infrastructure, development, and operations, to ensure security is integrated into operational processes and system monitoring.
• Serve as a subject matter expert (SME) for Data Integrity and DLP Engineering best practices.

• 5+ years of experience of deploying and supporting Data Protection Technologies
• 2+ years of experience with Zscaler, Microsoft Purview (Security), and /or Symantec DLP(Broadcom)
• 2+ years of experience with 2 out of 3: Google Cloud Platform (GCP), Microsoft Azure or Amazon Web Service (AWS)
• 2+ years of experience with SASE, Zero Trust and Conditional Access frameworks and architecture
• 2+ years of experience wth Email Architecture, Firewalls, Network Engineering, Encryption and SSL

• Familiarity with Regular Expression (Regex), Splunk, Chronical and Microsoft Power BI,
• Experience in designing and implementing Data Security Controls in multi-cloud and hybrid environments.
• Proven experience working in security engineering, showcasing hands-on project contributions and collaboration with cross-functional teams.
• Ability to provide off hours and weekend support with short notice.

• Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience)