Remote Insider Threat & DLP Security Analyst

remoteo; United States; Remote; USD 79,000 - 101,000; Full time

Benefits offered by this job

Remote work from eligible countries

International cybersecurity projects

Career development

Job summary

The Whiteam Consulting is seeking an experienced Insider Threat & DLP Security Analyst to join our cybersecurity projects focused on protecting sensitive enterprise data from deliberate or accidental external loss. You will work on extending DLP baseline controls, identifying insider threat scenarios, analysing security data, and developing threat hunting techniques to improve protection of data.

The role requires hands-on experience with SIEM, data analysis, and Microsoft Purview DLP, along

Qualifications

• 3 years of experience in cybersecurity, information security, security monitoring, DLP, insider threat, or a related field.
• Strong experience in data analysis and security monitoring.
• Solid experience with SIEM platforms and log analysis.
• Strong pattern recognition and analytical skills for identifying suspicious or anomalous activity.
• Hands-on experience with Microsoft Purview DLP.
• Knowledge of Cloud environments and security concepts.
• Knowledge of SaaS platforms and CASB solutions.
• Understanding of insider threat concepts, techniques, and use cases.
• Knowledge of information security principles, controls, and practices.
• Knowledge of concepts, tools, and practices related to computer crime, fraud, and digital investigations.
• Strong problem-solving skills and the ability to analyse complex scenarios involving multiple systems.
• Ability to identify security visibility and control gaps and work with technical teams to remediate them.
• Ability to communicate findings and recommendations clearly to both technical and non-technical stakeholders.
• Advanced English level (C1 minimum).
• Location restricted to Spain, Poland, UK, or Portugal.

Responsibilities

• Assess and balance insider risks against business requirements for securely sharing data with approved third parties, regulators, and customers.
• Support the protection of sensitive enterprise data while ensuring that security controls allow colleagues to perform their activities effectively.
• Identify and define insider threat use cases in collaboration with the DLP Insider Threat Lead.
• Perform insider threat hunting activities across security monitoring and data sources.
• Analyse security events, logs, and data patterns to identify potentially suspicious activity and insider threat indicators.
• Identify visibility, monitoring, and security control gaps across different systems and platforms.
• Work with relevant technical and security teams to address identified gaps and improve security controls.
• Develop and recommend high-fidelity threat hunting techniques to the DLP Insider Threat Lead.
• Contribute to the definition of regular threat hunting activities and automated alerting use cases.
• Investigate and analyse complex security scenarios involving multiple systems and data sources.
• Escalate security issues when required to ensure appropriate protection of enterprise data.
• Support the continuous improvement of DLP and Insider Threat capabilities.

Skills

Security monitoring

SIEM expertise

Data analysis

Microsoft Purview DLP

Cloud security

CASB knowledge

Insider threat concepts

English Proficiency

Analytical thinking

Education

Bachelor's in cybersecurity

Tools

SIEM platforms

Microsoft Purview

Job description

The Whiteam Consulting is seeking an experienced Insider Threat & DLP Security Analyst to join our cybersecurity projects focused on protecting sensitive enterprise data from deliberate or accidental external loss. You will work on extending DLP baseline controls, identifying insider threat scenarios, analysing security data, and developing threat hunting techniques to improve protection of data.

The role requires hands-on experience with SIEM, data analysis, and Microsoft Purview DLP, along