AbbVie Information Security is looking for a highly motivated, experienced, and skilled specialist to join the Data Security team. AbbVie’s Data Security team empowers AbbVie workforce to confidently create and collaborate on life changing medicines while minimizing unauthorized distribution and misuse. The Data Security team is a function within the larger Information Security organization. Join us as Senior Data Loss Prevention Analyst to support and improve our efforts to protect AbbVie sensitive data from insider risks.

This position can be virtual anywhere in the U.S.

The Senior Data Loss Prevention (DLP) Analyst will lead efforts to identify, develop, and implement data security controls and mitigation capabilities across a variety of infrastructure technologies including endpoint, network, and cloud services. The Senior Analyst will collaborate with infrastructure and application teams to gain an understanding of technology capabilities and advise them on mechanisms to mitigate insider risk activity while enabling collaboration.

The ideal candidate will have broad experience and knowledge of technology systems, applications, and networks along with the potential proactive or reactive controls that can be used to enhance the protection of data. They will have the ability to research and communicate technical concepts and configurations to a variety of stakeholders.

Responsibilities

• Lead complex and sensitive data loss investigations from initial alert through documentation and closure, including cases involving potential insider risk. 
• Serve as the senior escalation point for the DLP team, providing guidance and second level review on cases requiring advanced analytical judgment. 
• Design, build, test, and tune DLP policies and detection rules in Microsoft Purview, balancing detection coverage against false positive volume. 
• Develop and maintain Splunk searches, correlation logic, dashboards, and reports to support DLP investigations, alert triage, and program metrics. 
• Continuously review the alert queue to identify tuning opportunities, detection gaps, and candidates for new use cases. 
• Correlate DLP telemetry with other data sources, endpoint, email, cloud, identity, and network logs to build complete pictures of potential data exfiltration. 
• Support the migration from the legacy DLP platform, including use-case mapping, policy translation, validation testing, and detection parity verification. 
• Partner with Legal, HR, Compliance, and Privacy on investigations requiring cross functional coordination, and prepare clear written findings for both technical and non-technical audiences. 
• Mentor junior analysts, document investigative procedures, and contribute to playbooks and runbooks that improve team consistency and efficiency.