IR Engineer II - DLP Response Engineer (Purview)

Western Alliance Bancorp
Phoenix
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsEducation: high_schoolSkills: ["Analytical","Documentation","Troubleshooting","Communication","Discretion"]

Administer, triage, and continuously improve Microsoft Purview Insider Risk Management and Data Loss Prevention capabilities to support risk-based escalation and case workflows. Validate alert context and evidence, tune policies and detection logic to reduce false positives, and manage sensitivity labels, trainable classifiers, and DLP controls across Microsoft 365 workloads. Partner with IT, HR, Legal, and Security to support monitoring, investigations, audit documentation, and operational workflow maturity.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Western Alliance Bancorp
Western Alliance Bancorp
2 days ago

IR Engineer II - DLP Response Engineer (Purview)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 12 hours agoStatus: Live

Job Summary

Administer, triage, and continuously improve Microsoft Purview Insider Risk Management and Data Loss Prevention capabilities to support risk-based escalation and case workflows. Validate alert context and evidence, tune policies and detection logic to reduce false positives, and manage sensitivity labels, trainable classifiers, and DLP controls across Microsoft 365 workloads. Partner with IT, HR, Legal, and Security to support monitoring, investigations, audit documentation, and operational workflow maturity.
Location: Phoenix
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Design, implement, test, maintain, and continuously improve Microsoft Purview policies and detection logic for DLP and Insider Risk workflows.
  • •Support configuration and lifecycle management of sensitivity labels, Sensitive Information Types, trainable classifiers, and DLP endpoint controls.
  • •Validate alerts by reviewing evidence, user activity, data movement, and policy matches to determine whether additional review or escalation is needed.
  • •Support testing and deployment of new or modified Purview policies, including validation of expected matches, alert generation, and downstream workflow behavior.
  • •Coordinate case management and investigations by collecting evidence, documenting dispositions, routing escalations, and supporting audit and regulatory documentation.

Pay and Benefits

Perks:Health InsuranceDental401kTuition AssistanceEmployee VolunteerWellness StipendTime Off

Key Requirements

  • •5+ years of experience in cybersecurity, information security, data protection, insider risk, security operations, compliance engineering, or a related technology function.
  • •Intermediate to advanced experience administering, configuring, or supporting Microsoft Purview or Microsoft 365 security, compliance, or information protection capabilities.
  • •Intermediate to advanced experience reviewing, validating, or triaging security, compliance, DLP, insider risk, or user activity alerts.
  • •Working knowledge of data protection concepts, including sensitive data handling, data loss prevention, information protection, data classification, and risk-based monitoring.
  • •Strong analytical, documentation, troubleshooting, and communication skills, including leading during high-pressure incidents and communicating risk to stakeholders.
Experience:5+ yearsCybersecurityInformation securityData protectionInsider riskSecurity operationsCompliance engineering
Education:High School
Skills:AnalyticalDocumentationTroubleshootingCommunicationDiscretion
Certifications:Microsoft Certified: Information Security Administrator Associate (SC-401)Microsoft Certified: Security Operations Analyst Associate (SC-200)Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)Microsoft Certified: Identity and Access Administrator Associate (SC-300)CISSPCISMSecurity+GSEC
Tech Stack:Microsoft PurviewMicrosoft 365Insider Risk ManagementData Loss Prevention (DLP)Sensitivity labelsSensitive Information TypesTrainable classifiersPolicy tipsExchangeMicrosoft TeamsSharePointOneDriveEndpoint DLPMicrosoft 365 CopilotGenerative AIDTEX InterceptBroadcom DLPExact Data MatchAuto-labelingSecurity compliance

Company Brief

Western Alliance Bancorp
Bank holding company that provides commercial banking, mortgage banking, treasury management, and specialized financial services through its Western Alliance Bank subsidiaries. Serves businesses, real estate clients, and consumers across the United States.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Phoenix, United States
Founded: 1994
WebsiteLinkedIn