DLP Analyst: Data Protection & Incident Response

Hiscox Underwriting Group Services Ltd Portugal (HUGS PT); Lisboa; On-site; EUR 45,000 - 66,000; Full time

Job summary

Hiscox is seeking a Data Loss Prevention (DLP) Analyst in Lisbon to support its DLP capability by monitoring, triaging, and investigating alerts across network, endpoint, cloud, and email systems. You will review alerts from Zscaler, Purview, and Mimecast and determine genuine risks or false positives, escalating confirmed incidents as needed.

This hands-on role focuses on improving detection quality, reducing noise, and ensuring timely handling of DLP events in collaboration with Privacy and

Qualifications

• Experience with enterprise DLP or security monitoring tools.
• Strong analytical and investigative skills with attention to detail.
• Experience in Security Operations, SOC, or monitoring/analysis roles.
• Familiarity with data classification and GDPR principles.

Responsibilities

• Monitor and triage DLP alerts across networks and cloud environments.
• Investigate alerts to determine true incidents or false positives.
• Escalate validated incidents to Privacy or Cyber Security teams with evidence.
• Document investigations in case management tools and ensure SLA alignment.
• Support process improvements for DLP rule tuning and noise reduction.

Skills

Data security analysis

DLP monitoring

Threat investigation

Tools

Zscaler

Microsoft Purview

Mimecast

Job description

Hiscox is seeking a Data Loss Prevention (DLP) Analyst in Lisbon to support its DLP capability by monitoring, triaging, and investigating alerts across network, endpoint, cloud, and email systems. You will review alerts from Zscaler, Purview, and Mimecast and determine genuine risks or false positives, escalating confirmed incidents as needed.

This hands-on role focuses on improving detection quality, reducing noise, and ensuring timely handling of DLP events in collaboration with Privacy and