{"id":1622243,"url":"https://alion.io/job/thg-senior-it-security-engineer-remote","title":"Senior IT Security Engineer (REMOTE)","company":{"id":51472,"name":"THG","domain":"thg.com","url":"https://alion.io/company/thg-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Worcester, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":213000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":283},"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-24T04:00:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-11T19:15:37Z","board_verified":true,"closed_at":null,"days_open":17,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":17},"description":"We are seeking a highly skilled Senior Security Engineer to join our IT Security organization in Worcester, MA or in a remote work capacity.\nPOSITION SUMMARY:\nYou bring deep expertise in data protection, information governance, compliance technologies, and enterprise security architecture. This individual will serve as a technical leader responsible for administering, maintaining, enhancing, and strategically expanding the organization's Data Protection Program across cloud, SaaS, endpoint, collaboration, and enterprise data platforms.\n\nThe ideal candidate possesses hands-on experience implementing and operating enterprise-class Data Security Posture Management (DSPM), Data Loss Prevention (DLP), Information Protection, Records Management, eDiscovery, Insider Risk, and Data Governance solutions. Experience with platforms such as Microsoft Purview and other similar security control tools. \n\nThis role requires an individual who can operate at both the technical and strategic levels, partnering with Security, Legal, Compliance, Privacy, IT, Data Governance, and business stakeholders to mature and scale enterprise data protection capabilities.\n\nThis is a full-time, exempt position.\nIN THIS ROLE, YOU WILL:\nData Protection Program Leadership\nLead the ongoing administration, enhancement, and growth of the enterprise Data Protection Program.\nDevelop and execute data protection roadmaps aligned with business, regulatory, and security objectives.\nIdentify opportunities to improve data protection maturity and reduce organizational risk.\nEstablish metrics and reporting that demonstrate program effectiveness.\nPartner with leadership to define long-term data governance and protection strategies.\n\nInformation Protection & Data Governance\nDesign and maintain enterprise data classification frameworks.\nDevelop and govern data handling standards and protection requirements.\nImplement and manage sensitivity labeling, encryption, and information protection controls.\nCollaborate with Data Governance teams to establish classification taxonomies and data ownership models.\nDevelop automated classification and data discovery capabilities across structured and unstructured repositories.\n\nData Loss Prevention (DLP)\nDesign, implement, and manage enterprise DLP strategies.\nDevelop policies protecting sensitive information across email, collaboration platforms, endpoints, cloud applications, and remote work environments.\nAnalyze incidents and adjust policies to improve effectiveness while minimizing business disruption.\nEstablish operational processes for data loss investigations and response activities.\n\nInsider Risk & Investigations\nImplement and maintain insider risk monitoring capabilities.\nDevelop use cases and detection strategies for data misuse, theft, fraud, and policy violations.\nSupport internal investigations involving sensitive data and policy violations.\nPartner with HR, Legal, and Compliance teams during investigations.\n\neDiscovery, Retention & Records Management\nSupport legal hold, eDiscovery, and regulatory response processes.\nDevelop data retention and disposition strategies.\nManage records management controls supporting compliance requirements.\nEnsure defensible preservation and collection processes are established.\n\nCompliance & Regulatory Support\nSupport security, privacy, and regulatory audits.\nMap compliance requirements to implemented technical controls.\nAssist with risk assessments and remediation planning.\nPartner with Compliance and Legal teams to demonstrate regulatory adherence.\n\nPlatform Engineering & Integration\nDesign and maintain enterprise data protection architectures.\nIntegrate data security tools with SIEM, case management, and operational platforms.\nOnboard cloud, SaaS, endpoint, and on-premises data sources.\nDevelop automation and operational efficiencies using scripting and APIs.\nManage tool upgrades, enhancements, health monitoring, and operational support.\n\nWHAT YOU NEED TO APPLY: \n7+ years of information security experience.\n5+ years of hands-on experience supporting enterprise data protection initiatives.\nExperience administering one or more enterprise data protection, governance, or compliance platforms.\nExperience implementing DLP, information protection, data classification, and compliance solutions.\nExperience working with Legal, Compliance, Privacy, and Audit functions.\nExperience leading enterprise-scale security initiatives and projects.\nAuthorization to work in the United States without current or future sponsorship (U.S. citizen or lawful permanent resident).\nTechnical Skills\nStrong experience in several of the following areas:\nData Protection Programs\nData Governance\nData Classification\nInformation Protection\nSensitivity Labels\nEncryption Technologies\nData Loss Prevention (DLP)\nInsider Risk Management\nCommunication Compliance\nRecords Management\nData Lifecycle Management\neDiscovery\nData Security Posture Management (DSPM)\nCloud Security\nIdentity and Access Management (IAM)\nRole-Based Access Control (RBAC)\nMicrosoft 365 Security\nEndpoint Security\nEnterprise Security Architecture\nSecurity Monitoring and SIEM Integration\nSecurity Automation and Scripting\nCompliance Frameworks (NIST, ISO 27001, CIS, PCI-DSS, HIPAA, GDPR, SOX)","description_format":"text","description_chars":5240,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-01T20:51:14Z"}],"visa":[],"liveness":{"score":68,"band":"ok","label":"Likely open","p_open":1,"p_active":0.751,"p_room":0.9,"age_days":16,"expected_fill_days":36,"reasons":["conf:1","velocity","win:mid"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/thg-senior-it-security-engineer-remote","json_url":"https://alion.io/job/thg-senior-it-security-engineer-remote.json","meta":{"generated_at":"2026-10-11T21:22:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10212,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51472},"rest":"https://alion.io/mcp/rest/get_company?id=51472"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthg-senior-it-security-engineer-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthg-senior-it-security-engineer-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthg-senior-it-security-engineer-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/thg-senior-it-security-engineer-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthg-senior-it-security-engineer-remote"}]}