Information Security Engineer

Primary Function of the Position

This position operates within the IT Security organization and focuses on data loss prevention (DLP) endpoint detection and response (EDR) incident management orchestration security automation and zero trust network access (ZTNA). The analyst administers and tunes DLP policies triages and responds to endpoint security events across Windows macOS and Linux builds automated response workflows and contributes to the continuous improvement of Intuitives security posture. Responsible for protecting company information systems and users from data exfiltration unauthorized access and threat exposure.

Essential Job Duties 

Administer tune and maintain DLP policies and rules within enterprise DLP and SASE/CASB platforms to prevent unauthorized data exfiltration across endpoints cloud applications and network egress points. 

Deploy configure and troubleshoot EDR agents across Windows macOS and Linux endpoints ensuring consistent sensor health policy enforcement and telemetry collection. 

Build and maintain automated incident response and orchestration workflows using SOAR platforms to accelerate alert triage enrichment containment and escalation across the security tooling stack. 

Support ZTNA policy implementation and enforcement in coordination with Network Security ensuring least-privilege access controls align with zero trust architecture principles. 

Investigate and respond to DLP alerts performing root cause analysis classifying data at risk coordinating with business stakeholders on policy exceptions and documenting findings for compliance and audit purposes. 

Triage and classify endpoint security events by severity and business impact correlating telemetry from EDR SIEM and DLP platforms to identify threats and data exposure risks. 

Perform endpoint troubleshooting across Windows macOS and Linux including agent deployment issues policy conflicts OS-specific behavioral anomalies and sensor communication failures. 

Develop and refine operational metrics and dashboards in Elasticsearch to track DLP policy effectiveness endpoint coverage gaps automation ROI and incident response performance. 

Collaborate with Detection Engineering to create and tune SIEM detection rules that address DLP bypass techniques EDR evasion and insider threat indicators. 

Partner with Incident Response and Investigations teams during escalated security events providing endpoint forensic data DLP event context and automation support throughout the incident lifecycle. 

Conduct and support internal security investigations including insider threat cases policy violations and unauthorized data handling using DLP EDR and SIEM platforms for evidence collection and forensic analysis. 

Maintain strict confidentiality and discretion when handling sensitive investigation materials personnel matters and privileged findings throughout the investigative lifecycle. 

Qualifications :

Required Skills and Experience

Minimum of 2 years of experience.

Hands-on experience administering and tuning enterprise DLP and SASE/CASB solutions across endpoint cloud and network enforcement points. 

Experience deploying managing and troubleshooting EDR platforms across Windows macOS and Linux environments. 

Demonstrated competence in endpoint troubleshooting across Windows macOS and Linux including agent lifecycle management OS-level diagnostics and policy conflict resolution. 

Understanding of underlying operating system internals for Windows macOS and Linux including file systems process management registry/plist configuration logging subsystems and kernel-level behaviors relevant to security tooling. 

Working knowledge of ZTNA concepts and technologies including identity-aware access controls micro-segmentation and least-privilege network policies. 

Experience building security automation and orchestration workflows using SOAR platforms to streamline incident triage enrichment and response. 

Familiarity with SIEM platforms and Elasticsearch for log analysis alert correlation and dashboard development. 

Strong communication skills with the ability to convey technical findings to IT teams engineering stakeholders and business partners in a matrixed organization.

Demonstrated ability to handle sensitive and confidential information with discretion including investigation findings personnel data and legal hold materials.

Investigative mindset: intellectual curiosity attention to detail methodical evidence handling objectivity and the ability to construct a factual narrative from disparate data sources.

Required Education and Training 

• Degree in a technical related field (or additional related experience)

Working Conditions 

• None

Preferred Skills and Experience 

Experience working within a SOC incident response or DLP operations function supporting enterprise-level environments. 

SANS/GIAC certification(s) strongly preferred (e.g. GCFE GCFA GCED GCIH GCIA GDSA or GREM). Other certifications such as CISSP or CompTIA Security are a plus. 

Experience operating across a mature enterprise security stack spanning EDR DLP SASE/CASB SOAR SIEM ZTNA next-generation firewalls identity providers and email security gateways. 

Demonstrated experience developing automated playbooks for DLP incident handling endpoint isolation or threat enrichment workflows. 

Understanding of insider threat detection methodologies data classification frameworks and regulatory requirements relevant to medical device or healthcare organizations (e.g. HIPAA FDA). 

Prior experience conducting or supporting workplace investigations forensic examinations or e-discovery processes in a corporate environment. 

Familiarity with chain-of-custody procedures legal hold requirements and evidence preservation standards. 

Prior systems administration experience across Windows macOS or Linux environments with a working understanding of Active Directory group policy endpoint management and OS-level security hardening. 

Additional Information :

Due to the nature of our business and the role please note that Intuitive and/or your customer(s) may require that you show current proof of vaccination against certain diseases including COVID-19.  Details can vary by role.

Intuitive is an Equal Opportunity Employer. We provide equal employment opportunities to all qualified applicants and employees and prohibit discrimination and harassment of any type without regard to race sex pregnancy sexual orientation gender identity national origin color age religion protected veteran or disability status genetic information or any other status protected under federal state or local applicable laws.

Mandatory Notices

U.S. Export Controls Disclaimer:  In accordance with the U.S. Export Administration Regulations (15 CFR 743.13(b)) some roles at Intuitive Surgical may be subject to U.S. export controls for prospective employeeswho are nationals from countries currently on embargo or sanctions status.

Certain information you provide as part of the application will be used for purposes of determining whether Intuitive Surgical will need to (i) obtain an export license from the U.S. Government on your behalf (note: the governments licensing process can take 3 to 6 months) or (ii) implement a Technology Control Plan (TCP) (note: typically adds 2 weeks to the hiring process).  

For any Intuitive role subject to export controls final offers are contingent upon obtaining an approved export license and/or an executed TCP prior to the prospective employeesstart date which may or may not be flexible and within a timeframe that does not unreasonably impede the hiring need. If applicable candidates will be notified and instructed on any requirements for these purposes. 

We will consider for employment qualified applicants with arrest and conviction records in accordance with fair chance laws.

Preference will be given to qualified candidates who do not reside or plan to reside in Alabama Arkansas Delaware Florida Indiana Iowa Louisiana Maryland Mississippi Missouri Oklahoma Pennsylvania South Carolina or Tennessee.

This position may be filled at a different job level than listed here depending on
business need and/or on the selected candidates experience knowledge and skills.
Compensation will be based primarily on the job level at which the role is filled and the
candidates qualifications consistent with applicable law.

We provide market-competitive compensation packages inclusive of base pay incentives benefits and equity. It would not be typical for someone to be hired at the top end of range for the role as actual pay will be determined based on several factors including experience skills and qualifications. The target compensation ranges are listed.

Accommodation & Accessibility Notice:

Intuitive is committed to providing reasonable accommodations to qualified individuals with disabilities. If you require assistance or an accommodation during any part of the application or interview process please contact People Services at

Remote Work :

No

Employment Type :

Full-time