Cyber Fusion Center Platform Lead

MSD•Upper Gwynedd Township, PA

15h•Hybrid

About The Position

We are seeking a dynamic and technically skilled Cyber Fusion Center Platform Lead to help shape and optimize our enterprise data protection strategy. This role is ideal for a cybersecurity professional with a strong foundation in automation, scripting, and platform engineering—particularly someone who has experience with Microsoft Purview and a passion for building scalable, secure systems. The ideal candidate will bring a blend of hands-on technical expertise and strategic thinking, with a background in cybersecurity automation, vulnerability research, and security operations. This role is not purely engineering-focused but requires a strong understanding of how to tune, manage, and evolve information protection platforms to meet business and compliance needs.

Requirements

Bachelor's degree in computer science or similar field
3+ years of experience in cybersecurity, automation engineering, or information protection roles.
Hands-on experience with Microsoft Purview, MIP/AIP, or similar data protection platforms.
Experience with tools such as SIEMs, Zscaler, CrowdStrike, and other Microsoft security platforms.
Proficiency in scripting and automation tools (e.g., PowerShell, Python, UiPath, C#).
Strong understanding of cybersecurity operations, including SOC workflows, threat intelligence, and vulnerability management.
Experience with tools such as SIEMs, Zscaler, CrowdStrike, and other Microsoft Security platforms.
Excellent communication skills and ability to work cross-functionally.

Nice To Haves

Experience in regulated industries such as pharmaceuticals or healthcare.
Certifications such as CISSP, GSEC, or other GIAC certifications
Background in offensive security, penetration testing, or red team operations.
Familiarity with cloud security and Microsoft 365 security tools.
Experience with report automation and documentation tools.

Responsibilities

Platform Optimization: Lead the configuration, tuning, and enhancement of Microsoft Purview and related information protection platforms (e.g., MIP, AIP, Insider Risk Management).
Automation & Engineering: Develop automation workflows and scripts (e.g., PowerShell, Python, C#) to streamline DLP operations, reporting, and incident response.
Data Analytics & Visualization: Analyze platform data to identify trends, generate insights, and build dashboards that inform risk posture and policy effectiveness.
Security Integration: Collaborate with SOC, threat intelligence, and red/blue teams to align DLP and insider risk capabilities with broader security operations.
Incident Response: Investigate and respond to data protection incidents, leveraging automation and analytics to improve response time and accuracy.
Cross-Functional Collaboration: Work with Legal, HR, Privacy, and IT to ensure platform configurations align with regulatory and organizational requirements.
Documentation & Enablement: Maintain technical documentation and contribute to training and awareness efforts across the organization.