Senior Security Operations Engineer, Included Health
$138.4-254.1k
Salary range dependent on candidate location. Plus equity
Digital healthcare provider
Job no longer available
Digital healthcare provider
1001+ employees
Job no longer available
$138.4-254.1k
Salary range dependent on candidate location. Plus equity
1001+ employees
Company mission
To raise the standard of healthcare for everyone.
Role
Who you are
- Minimum 5+ years of hands-on experience in security operations, incident response, or security engineering roles, with a strong emphasis on data protection and DLP
- Direct, hands-on experience deploying, tuning, and operating DLP tools (endpoint, network, SaaS, and/or cloud) in a production environment
- Experience implementing and operating Cloud Access Security Broker (CASB) or similar SaaS security controls
- Deep experience integrating DLP signals into SIEM/SOAR workflows (e.g., CrowdStrike, Splunk, Sentinel)
- Advanced scripting/automation skills (e.g., Python, PowerShell, KQL/SQL) used to enrich, tune, and report on DLP/IR telemetry at scale
- Proven experience with Endpoint Detection and Response (EDR) platforms (e.g., CrowdStrike, SentinelOne) and using them alongside DLP to investigate and contain data-focused incidents
- Strong experience with cloud data protection in AWS, including identifying and remediating misconfigurations, and leveraging native security services (e.g., GuardDuty, Security Hub) and CSPM tooling
- Experience designing and maintaining data classification and policy frameworks for PHI, PII, PCI, and other sensitive data types
- Capability to remain seated in a stationary position for prolonged periods
- Eye-hand coordination and manual dexterity to operate keyboard, computer and other office-related equipment
- Capability to work with leadership, employees, and members in an appropriate manner
What the job involves
- The Senior Security Operations Engineer is responsible for designing, implementing, and improving Data Loss Prevention (DLP) protections across Included Health's corporate and cloud environments
- You will lead hands-on deployment and tuning of DLP controls, including endpoint, network, and SaaS
- You will investigate and respond to potential data exfiltration events
- Additionally, you will drive remediation and hardening based on real-world incidents and detections
- You will own the operational lifecycle of our DLP stack
- It involves building and refining policies, partnering with stakeholders to validate business-safe controls, automating response playbooks, and turning signal from alerts and logs into durable security improvements
- You will also contribute to adjacent security operations functions, including incident response and vulnerability management, where they intersect with data protection
- You will play a crucial role within the Security Engineering team, reporting directly to the Senior Manager, Security Engineering
- Lead the response to DLP and data security incidents, including investigation, containment, remediation, and root cause analysis for suspected data exfiltration or improper data handling
- Own the deployment, configuration, and continuous tuning of DLP controls across endpoints, network egress, SaaS applications, and cloud storage to protect PHI, PII, PCI, and other sensitive data
- Develop and maintain DLP policies, rules, and classifications that balance security, usability, and regulatory/client requirements
- Build and refine automated response playbooks and workflows that enrich, triage, and respond to DLP alerts, reducing manual effort and mean time to respond
- Perform proactive hunting for anomalous data movement, including unusual destinations, channels, or volumes, using DLP telemetry, EDR, SIEM, and identity signals
- Partner with Security Engineering, IT, Legal, Privacy, Compliance, and business stakeholders to design and enforce secure data-handling patterns and exception processes
- Contribute to broader incident response activities where data exposure or regulatory impact is a concern, including evidence handling and stakeholder communication
- Define and track key DLP metrics (coverage, detection quality, MTTD/MTTR, false positive rate) and communicate progress to security leadership and cross-functional partners
Our take
As the name suggests, Included Health is on a mission to raise the standard of healthcare for everyone, offering inclusive, integrated virtual care and navigation.
It differentiates itself from competitors with its emphasis on improving health outcomes and challenges faced by communities including LGBTQ+ and BIPOC. The negative healthcare experiences faced by these marginalized groups means they often avoid care at a rate that is around 3x greater than the broader US population, putting their health at risk.
With healthcare still fragmented and focused on one-size-fits-all solutions, Included Health is disrupting the market by using technology to match patients quickly with the best care, no matter where they live. And it currently counts retail behemoths Walmart and Home Depot as customers.
Freddie
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Sep 2020
$175m
GROWTH EQUITY VC
May 2018
$66m
SERIES D
Total funding: $347m
Company benefits
- Comprehensive medical, dental and vision plans
- All employees, their spouses, and children have free access to Included Health services
- Need time to recharge? Exempt employees enjoy flexible, unaccrued discretionary time off — take it when you need it
Company HQ
Financial District, San Francisco, CA
Leadership
Owen Tripp
(Co-Founder & CEO)Previously served as a Senior Consultant at Accenture before joining eBay as the Manager and Founder of User Behaviour Intelligence in 2004. Co-founded Reputation.com in 2006, and served as its COO from 2008 to 2012. Was an Advisor at Pathbrite and Life360.
Lawrence "Rusty" Hofmann
(Co-Founder)Studied Medicine at Ohio State, Johns Hopkins and Stanford. Was Assistant Professor at Johns Hopkins from 2000 to 2005, and is now Professor of Interventional Radiology at Stanford. Co-founded Grand Rounds, rebranded to Included Health, in 2012. Is Medical Director at Stanford Health Care.
Share this job
View 17 more jobs at Included Health