DLP Analyst: Detect, Investigate & Cut False Positives

Hiscox; York and North Yorkshire; On-site; GBP 42,000 - 58,000; Full time

Job summary

Hiscox is seeking a DLP Analyst to support the organisation's data loss prevention capabilities. You will monitor alerts across network, endpoint, cloud, and email environments, performing triage to distinguish true risks from false positives, and escalating confirmed incidents to Privacy or Cyber teams.

This hands-on role focuses on improving detection quality, reducing false positives, and ensuring timely handling of DLP events in line with SLAs.

Qualifications

• Experience in security monitoring or SOC environments.
• Ability to triage alerts and assess risk quickly.
• Strong written and verbal communication for incident reports.
• Familiarity with data protection principles (GDPR).

Responsibilities

• Monitor DLP alerts across Zscaler, Purview and Mimecast.
• Perform initial triage to assess validity and impact.
• Escalate confirmed incidents with evidence to Privacy/Cyber teams.
• Document investigations in case management tools and comply with SOPs.

Skills

Analytical thinking

Investigation

Risk assessment

Communication

Documentation

Tools

Zscaler

Microsoft Purview

Mimecast

Job description

Hiscox is seeking a DLP Analyst to support the organisation's data loss prevention capabilities. You will monitor alerts across network, endpoint, cloud, and email environments, performing triage to distinguish true risks from false positives, and escalating confirmed incidents to Privacy or Cyber teams.

This hands-on role focuses on improving detection quality, reducing false positives, and ensuring timely handling of DLP events in line with SLAs.