Security Analyst – AI Data Protection & DSPM

Goodfit; Columbia (SC); Hybrid; USD 70,000 - 110,000; Full time

Job summary

Goodfit is seeking a Security Analyst to support the agency’s cybersecurity and data protection program, focusing on DLP, insider risk management, and DSPM for AI. The role involves auditing, incident escalation, and collaboration with technical and business teams to strengthen governance and protect sensitive information.

The position is hybrid (3 days in office, 2 days remote) with the candidate required to be a South Carolina resident, do not relocate.

Qualifications

• 3+ years supporting enterprise cybersecurity operations (threat monitoring, incident response, risk analysis).
• Hands-on with data protection tech: DLP, insider risk tools, and DSPM for AI.
• Experience reviewing and triaging data-related security alerts and incidents.
• Collaborates with technical and business teams to improve data security posture.

Responsibilities

• Monitor and triage security alerts across DLP, insider risk, and DSPM platforms.
• Investigate suspicious activity involving sensitive information and document findings.
• Escalate incidents per agency procedures and assist with containment and recovery.
• Collaborate with technical and non-technical teams to strengthen controls.
• Participate in vendor security assessments and audits as needed.
• Support audits, regulatory reviews, and compliance efforts.

Skills

DLP

DSPM for AI

Insider Risk Management

Threat Monitoring

Incident Response

Data Governance

Education

Bachelor's degree in cybersecurity or related field

CompTIA Security+ or GIAC Security Essentials

Microsoft SC100/SC200

CEH or CISSP (preferred)

Tools

Azure Security

Cortex/DSPM platforms

Job description

Goodfit is seeking a Security Analyst to support the agency’s cybersecurity and data protection program, focusing on DLP, insider risk management, and DSPM for AI. The role involves auditing, incident escalation, and collaboration with technical and business teams to strengthen governance and protect sensitive information.

The position is hybrid (3 days in office, 2 days remote) with the candidate required to be a South Carolina resident, do not relocate.