Senior Data Protection Analyst

cyberhaven; United States; Remote; USD 100,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation

Stock options

Flexible time off

Growth opportunities

Job summary

cyberhaven is seeking a Senior Data Protection Analyst to help clients detect and respond to insider threats and endpoint forensic incidents using an AI-driven data lineage platform. The role blends hands-on security analysis with customer-facing advisory work in a fast-paced, high-growth environment.

The position requires 3+ years in data protection, insider threat programs, and advising on security issues, with a customer-centric, globally collaborative mindset.

Qualifications

• Experience with data protection products and incident mitigation workflows.
• Experience with insider threat programs and information security.
• Advising on data protection security issues and insider actions.
• Ability to present to both technical and non-technical audiences.

Responsibilities

• Act as a subject matter expert on data protection, tracking external DLP market trends and translating insights into demonstrated customer value
• Analyze platform event data to refine policies, sharpen alerts, and surface areas where data loss risk is greatest
• Partner with client security and operations teams to design incident response workflows aligned to their security objectives
• Tune datasets and policies as customers' data risk strategies mature and business needs evolve
• Identify patterns across incidents and drive requirements that improve detection and response capabilities
• Prepare and present formal summaries for both technical and non-technical audiences
• Collaborate with product and engineering teams to develop new strategies for monitoring and preventing data loss
• Reduce noise and false positives in analytic outputs
• Conduct forensic analysis on users, groups, and unsanctioned egress destinations as requested by clients

Skills

Data protection

Endpoint protection

Insider threat

Incident response

Analytical thinking

Communication skills

Cross-team collaboration

Tools

SIEM

SOAR

DLP

CASB

Job description

Role overview

Join a growing Professional and Managed Services organization focused on data protection for modern enterprises. The Senior Data Protection Analyst plays a frontline role in helping customers detect and respond to insider threats and endpoint forensic incidents using an AI-driven data lineage platform. The position blends hands-on security analysis with customer-facing advisory work in a fast-paced, high-growth environment.

Responsibilities

• Act as a subject matter expert on data protection, tracking external DLP market trends and translating insights into demonstrated customer value
• Analyze platform event data to refine policies, sharpen alerts, and surface areas where data loss risk is greatest
• Partner with client security and operations teams to design incident response workflows aligned to their security objectives
• Tune datasets and policies as customers' data risk strategies mature and business needs evolve
• Identify patterns across incidents and drive requirements that improve detection and response capabilities
• Prepare and present formal summaries for both technical and non-technical audiences
• Collaborate with product and engineering teams to develop new strategies for monitoring and preventing data loss
• Reduce noise and false positives in analytic outputs
• Conduct forensic analysis on users, groups, and unsanctioned egress destinations as requested by clients

Requirements

• 3+ years of experience working with a data protection product, including endpoint protection best practices and incident mitigation workflows
• 2+ years of experience with insider threat programs and information security
• 4+ years of experience advising on data protection security issues, including risks from accidental and malicious insider actions
• Strong problem-solving and analytical skills with creative, logical thinking
• Customer-centric mindset with strong empathy and a focus on delivering value
• Ability to work effectively as part of a global team
• Excellent written and verbal communication skills, including the ability to create management-level presentations and incident investigation analyses

Nice to have

• Familiarity with SIEM and SOAR integrations
• Knowledge of security controls for handling sensitive data types
• Experience managing both the technical analysis and the documentation or project management sides of incident response
• Understanding of macOS, Linux, and Windows environments
• Hands-on expertise with DLP, insider threat, and CASB solutions
• Familiarity with cloud applications and services

Benefits and work setup

• Competitive compensation
• Stock options
• Flexible time off
• Growth opportunities in an expanding services organization