Hybrid DLP Analyst — Detect, Triage & Reduce False Positives

Hiscox; Lisboa; Hybrid; EUR 40,000 - 60,000; Full time

Job summary

Hiscox is seeking a Data Loss Prevention Analyst to join our hybrid team in Lisbon. You will monitor DLP alerts from Zscaler, Microsoft Purview and Mimecast, triage events, and investigate potential data loss incidents.

You will escalate confirmed incidents to Privacy or Cyber Security teams with detailed evidence, while maintaining audit trails and following SOPs. The role emphasizes reducing false positives, improving detection quality, and supporting follow-up investigations.

Qualifications

• Experience with enterprise DLP or security monitoring tools is preferred.
• Strong analytical and investigative skills with attention to detail.
• Familiarity with GDPR and data protection principles and incident handling.

Responsibilities

• Monitor DLP alerts across Zscaler, Purview, and Mimecast and perform initial triage.
• Conduct detailed analysis of confirmed or high-risk alerts and escalation.
• Document alerts, investigations and outcomes in case management tools.
• Tune DLP rules and policies to reduce false positives and improve detection accuracy.
• Collaborate with Privacy, Legal and Cyber Security teams during investigations.
• Report on alert volumes, trends, false positives, and escalations.

Skills

DLP Monitoring

Alert triage

Investigation

Incident escalation

SOP compliance

Collaboration

Tools

Zscaler

Microsoft Purview

Mimecast

Job description

Hiscox is seeking a Data Loss Prevention Analyst to join our hybrid team in Lisbon. You will monitor DLP alerts from Zscaler, Microsoft Purview and Mimecast, triage events, and investigate potential data loss incidents.

You will escalate confirmed incidents to Privacy or Cyber Security teams with detailed evidence, while maintaining audit trails and following SOPs. The role emphasizes reducing false positives, improving detection quality, and supporting follow-up investigations.