Senior Data Protection Analyst — Insider Threat & DDR Lead

Cyberhaven; México; Presencial; MXN 900.000 - 1.300.000; Jornada completa

Descripción de la vacante

Cyberhaven is seeking a Senior Data Protection Analyst to join our Professional Services and Managed Services teams. You will analyze data security incidents, identify insider threat risks, and perform endpoint forensic investigations to protect customer environments.

You will work across macOS, Linux, Windows, and cloud platforms (AWS, GCP, Azure), using SQL for analysis, building dashboards, and refining DLP policies as client data risk evolves.

Formación

• 5+ years with data protection or adjacent security tools (EDR, SIEM, SOAR).
• 2+ years in Insider Threat/InfoSec.
• Experience with DLP, Insider Threat, CASB and controls for handling sensitive data.
• Comfortable across macOS, Linux, Windows and cloud platforms (AWS, GCP, Azure).

Responsabilidades

• Provide insight into DLP analytics and related issues.
• Analyze Cyberhaven’s Data Detection and Response (DDR) platform event data to improve policies and incidents/alerts.
• Refine datasets and policies and manage them as customers’ data risk strategy matures and business needs evolve.
• Prepare and present summaries and reports to internal team members.
• Eliminate noise and false-positive information from analytic results to enhance detection accuracy.
• Conduct forensic analysis on people, groups, and non sanctioned egress destinations as requested.

Conocimientos

Data protection

Insider Threat/InfoSec

Endpoint protection

DLP

Cloud platforms

SQL & dashboards

Herramientas

EDR

SIEM

SOAR

CASB

DLP rules (XML)

Descripción del empleo

Cyberhaven is seeking a Senior Data Protection Analyst to join our Professional Services and Managed Services teams. You will analyze data security incidents, identify insider threat risks, and perform endpoint forensic investigations to protect customer environments.

You will work across macOS, Linux, Windows, and cloud platforms (AWS, GCP, Azure), using SQL for analysis, building dashboards, and refining DLP policies as client data risk evolves.