Insider Risk & Data Protection Analyst

Hidden Jobs; United States; Remote; USD 85,000 - 125,000; Full time

Job summary

cyberhaven is seeking a Data Protection Analyst to join the growing Professional & Managed Services team. You will investigate insider-threat incidents, analyze endpoint activity, and help clients operationalize a Data Detection & Response platform to reduce data loss.

The role requires hands-on experience with DLP, Insider Threat, CASB, and SIEM/SOAR integrations, plus a strong ability to communicate complex security concepts to technical and non-technical audiences.

Qualifications

• 3+ years of experience with data protection products.
• Knowledge of endpoint protection best practices.
• Experience with DLP, Insider Threat, and CASB solutions.
• Familiar with SIEM/SOAR integrations.
• Strong knowledge of macOS, Linux, and Windows.
• Experience in incident response documentation and reporting.
• Customer-focused with strong written and verbal communication.

Responsibilities

• Act as a subject-matter expert on data protection and DLP market trends.
• Analyze data from a Data Detection and Response platform to refine policies and alerts.
• Partner with clients to design incident-response workflows aligned to security objectives.
• Refine datasets and policies as customers' data-risk strategies evolve.
• Identify trends and drive requirements to improve detection and response policies.
• Deliver formal summaries and presentations to technical and non-technical audiences.
• Collaborate with engineering teams to monitor and prevent data loss.
• Reduce noise and false positives in analytic outputs; conduct forensic analysis.

Skills

Data protection

Insider risk

Endpoint protection

Analytical thinking

Communication skills

Cloud technologies

Problem solving

Collaborative teamwork

Tools

DLP tools

Insider Threat tools

CASB

SIEM/SOAR integrations

MacOS/Linux/Windows familiarity

Job description

cyberhaven is seeking a Data Protection Analyst to join the growing Professional & Managed Services team. You will investigate insider-threat incidents, analyze endpoint activity, and help clients operationalize a Data Detection & Response platform to reduce data loss.

The role requires hands-on experience with DLP, Insider Threat, CASB, and SIEM/SOAR integrations, plus a strong ability to communicate complex security concepts to technical and non-technical audiences.