You apply on Altera’s own site. RoleWeek never sees your application.
Skills mentionedZero Trust
About the Role
Altera is seeking an experienced Endpoint and Data Security Engineer to manage and optimize Microsoft Defender, Microsoft Purview DLP, and Securiti.ai platforms. This role will strengthen endpoint protection, threat detection, data loss prevention, and sensitive data security across enterprise environments while supporting incident response, compliance, and continuous security improvement.
Microsoft Defender Security Platform Engineering
Administer, configure, and optimize the Microsoft Defender Security suite, including:
Microsoft Defender for Endpoint
Microsoft Defender for Office 365
Microsoft Defender for Identity
Microsoft Defender for Cloud Apps
Microsoft Defender Vulnerability Management
Microsoft Defender XDR
Microsoft Defender for Cloud
Develop and maintain endpoint protection policies, threat detection capabilities, attack surface reduction controls, and automated response workflows.
Monitor platform health, security coverage, incidents, alerts, and detection effectiveness.
Configure and maintain endpoint protection, endpoint detection and response (EDR), device control, web protection, email security, identity protection, and cloud application security controls.
Improve threat detection fidelity while reducing false positives and operational overhead.
Support threat hunting, incident investigation, and remediation activities.
Lead security onboarding efforts for new business units, applications, and technologies.
Data Loss Prevention (Microsoft Purview)
Design, implement, and administer Microsoft Purview Data Loss Prevention controls across:
Endpoints
Microsoft 365
Exchange Online
SharePoint Online
OneDrive
Microsoft Teams
Cloud applications
Develop and maintain DLP policies protecting intellectual property, confidential data, regulated information, and business-critical assets.
Support data classification, sensitivity labeling, encryption, retention, and information protection programs.
Monitor policy violations, investigate incidents, and coordinate remediation activities.
Partner with business stakeholders to align data protection controls with operational requirements.
Develop reporting and analytics related to DLP effectiveness, violations, trends, and risk exposure.
Continuously optimize policy tuning, exception management, and user experience.
Data Security Posture Management (DSPM)
Securiti.ai Administration and Governance
Administer and optimize the Securiti.ai platform to identify, classify, monitor, and secure sensitive enterprise data.
Support enterprise-wide data discovery initiatives across:
Structured and unstructured data repositories
Cloud storage platforms
Collaboration environments
Enterprise applications
Data lakes and databases
Monitor data security posture and identify risks involving:
Sensitive data exposure
Data overexposure
Excessive permissions
Data residency concerns
Regulatory compliance gaps
Develop remediation plans for identified data security risks.
Partner with data owners, information governance teams, privacy teams, and security stakeholders to improve overall data protection maturity.
Support continuous compliance initiatives related to data governance and security requirements.
Security Operations and Incident Response
Monitor and triage endpoint and data security alerts generated through Microsoft Defender, Microsoft Purview, and Securiti.ai.
Assess security events to determine potential impact to endpoint, data, and information protection controls.
Collaborate with SOC and Incident Response teams by providing platform expertise, investigation support, relevant telemetry, and technical context.
Support incident investigations and remediation activities for events within the Endpoint and Data Security team’s remit.
Assist with containment, recovery, root-cause analysis, and corrective actions as directed by SOC or Incident Response leadership.
Analyze recurring alerts, attack trends, policy violations, and control gaps to recommend improvements across Defender, Purview DLP, and Securiti.ai.
Security Engineering, Governance & Compliance
Establish security standards, procedures, and technical controls supporting endpoint and data protection programs.
Support security audits, assessments, customer assurance reviews, and regulatory compliance initiatives.
Maintain documentation, control evidence, security baselines, and operational procedures.
Track remediation plans, exceptions, findings, and risk acceptance decisions.
Contribute to Zero Trust security initiatives and enterprise security transformation efforts.
Metrics, Reporting, and Continuous Improvement
Develop dashboards and reporting covering
Defender security coverage and protection health
Endpoint compliance and device risk scores
Vulnerability remediation performance
DLP incidents and policy violations
Data classification coverage
Sensitive data discovery metrics
DSPM posture findings
Excessive access and data exposure risks
Security incident trends
Control effectiveness and adoption metrics
Drive continuous improvement initiatives to increase visibility, reduce risk, improve automation, and strengthen overall security posture.
Salary Range
The pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance.
$133,200 - $192,825 USD
We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.
Minimum Qualifications
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
5+ years of experience in endpoint security, data protection, security engineering, or a related cybersecurity discipline.
Hands-on experience administering Microsoft Defender, Microsoft Purview DLP, and/or data security posture management platforms.
Experience with endpoint detection and response, security incident investigation, data protection policies, and vulnerability remediation.
Familiarity with security governance, compliance requirements, and Zero Trust principles.
Job Type
Regular
Shift
Shift 1 (United States of America)
Primary Location
San Jose, California, United States
Additional Locations
Equal opportunity and legal
Posting Statement
All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.
