The posting
Job Description
Job Summary
As a key member of the Information Technology Risk Management and Security (ITRM&S) organization, the successful candidate will act as a core member of the Information Protection Team primarily working within the Microsoft Purview Platform. This is a hybrid role featuring a dual focus on both operational DLP engineering to protect company data, and other DLP practices. The candidate will be responsible for configuring, tuning, and maintaining the information protection technologies and assisting with managing and assisting with the remediation of instances of sensitive data leakage and insider risk events.
Responsibilities:
- Design, build, test, and deploy new DLP policies, rules, and logic across network, endpoint, and cloud environments to address emerging risks and align with the company's data protection strategy.
- Develop, implement, and maintain automation scripts and processes (e.g., using Python or PowerShell) to improve incident response workflows, reduce manual effort, and enhance reporting accuracy.
- Support the maintenance, enhancement, and troubleshooting of the information protection technology stack to ensure high availability, accurate detection, and optimal platform performance.
- Continuously evaluate, improve, and challenge existing processes, procedures, and technical controls to adapt to a fast-moving and evolving security environment.
- Collaborate closely with the Global Security Group, Legal, Human Resources, and other business units to respond to data loss prevents needs within established corporate policies.
- Create, modify, and review security dashboards and metrics reports to provide actionable insights into the organization’s overall data risk posture.
- Ability to investigate, analyze, and manage security incidents generated from Data Loss Prevention (DLP) and other information protection tools, utilizing log analysis, data visualization, and pattern analysis.
Position Qualifications:
Education Minimum Requirement:
- Formalized training, in the form of college course work or industry recognized training courses and certifications, in Computer Science, Information Security, or Computer Information Systems and related experience using Microsoft Purview Platform
- Minimum of three (3) years experience in Cyber Security roles
Required Experience and Skills:
- Proven experience in an information security discipline, with a professional background that includes both active incident response and technical platform implementation.
- Strong, practical experience with Data Loss Prevention (DLP) concepts, methodologies, and enterprise-grade tools.
- Demonstrated ability to independently investigate and resolve complex security incidents (Tier 2/3 support levels), including performing in-depth root cause analysis.
- Hands-on experience with scripting or programming languages (e.g., Python, PowerShell) specifically applied to automation, data extraction, or system integration.
- Excellent analytical, problem-solving, and written/verbal communication skills, with the ability to convey technical risks to non-technical stakeholders.
- Strong foundational understanding of networking protocols (TCP/IP), operating system architectures, and cloud security principles.
- Ability to work effectively in a collaborative team environment, manage shifting priorities, and balance operational emergencies with project-based engineering tasks.
Desired Experience and Skills:
- Microsoft Information Security Administrator, CISSP, Certified Information Security Manager (CISM), Certified Information Professional (CIP) or Insider Risk certifications preferred
- Willingness to actively seek and maintain industry information protection certifications, up-to-date knowledge of the current global data protection landscape, privacy regulations, and emerging security threat trends.
- Direct experience with specific DLP and security solutions for network, endpoint, and cloud environments (e.g., Microsoft 365 Purview, Zscaler, CrowdStrike).
- Experience proactively creating, testing, tuning, and deploying detection policies within security platforms.
- Proven ability to build strong, trusted relationships with cross-functional business and technology stakeholders.
#MSJR
Required Skills:
Adaptability, Analytical Thinking, Cyber Threat Hunting, Cyber Threat Intelligence, Data Loss Prevention (DLP), Detail-Oriented, Digital Forensics, Incident Response Management, Insider Threat Mitigation, Log Analysis, Malware Analysis, Security Information and Event Management (SIEM), Security Monitoring, Security Operations, SLA Management, Team Collaboration, Vulnerability Assessments, Vulnerability Management, Written Communication
Preferred Skills:
Current Employees apply HERE
Current Contingent Workers apply HERE
US and Puerto Rico Residents Only:
Our company is committed to inclusion, ensuring that candidates can engage in a hiring process that exhibits their true capabilities. Please click here if you need an accommodation during the application or hiring process.
As an Equal Employment Opportunity Employer, we provide equal opportunities to all employees and applicants for employment and prohibit discrimination on the basis of race, color, age, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, or other applicable legally protected characteristics. As a federal contractor, we comply with all affirmative action requirements for protected veterans and individuals with disabilities. For more information about personal rights under the U.S. Equal Opportunity Employment laws, visit:
EEOC Know Your Rights
EEOC GINA Supplement
We are proud to be a company that embraces the value of bringing together, talented, and committed people with diverse experiences, perspectives, skills and backgrounds. The fastest way to breakthrough innovation is when people with diverse ideas, broad experiences, backgrounds, and skills come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively.
Learn more about your rights, including under California, Colorado and other US State Acts
The primary location for this posting is:
USA - New Jersey - Rahway
Where required by law, the compensation range for this role is provided below.
The salary range for the primary location of this role is:
$79,200.00 - $124,700.00
This range reflects the Company's reasonable expectation of the base salary applicable to this role at the time of posting. An employee’s position within the salary range will be based on several factors including, but not limited to relevant education, qualifications, certifications, experience, skills, geographic location, government requirements, and business or organizational needs. The successful candidate will be eligible for annual bonus and long-term incentive, if applicable.
We offer a comprehensive package of benefits. Available benefits include medical, dental, vision healthcare and other insurance benefits (for employee and family), retirement benefits, including 401(k), paid holidays, vacation, and compassionate and sick days. More information about benefits is available at https://jobs.merck.com/us/en/compensation-and-benefits.
Additional location(s): Please note the salary range above applies to the Primary Location of the position. Where a role has other listed locations, different compensation guidelines may apply. You may find the salary ranges for additional locations below. If the salary range is not listed for the location you are applying to, our Talent Acquisition team will provide further information to you relevant to your location.
Additional location(s) Compensation Information:
San Francisco Residents Only: We will consider qualified applicants with arrest and conviction records for employment in compliance with the San Francisco Fair Chance Ordinance
Los Angeles Residents Only: We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance
Search Firm Representatives Please Read Carefully Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.
Employee Status:
Regular
Relocation:
No relocation
VISA Sponsorship:
No
Travel Requirements:
No Travel Required
Flexible Work Arrangements:
Hybrid
Shift:
Not Indicated
Valid Driving License:
No
Hazardous Material(s):
N/A
Job Posting End Date:
10/30/2026
*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.
