Senior Data Protection Analyst

Socket.dev; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Cyberhaven is seeking a Senior Data Protection Analyst to help build out our Professional Services and Managed Services functions. You will analyze data security incidents, identify insider threats, and manage documentation and incident response projects across customers’ environments.

You will work with DLP analytics, DDR event data, and endpoint platforms (macOS, Linux, Windows, AWS/GCP/Azure) to reduce data loss risk and improve detection accuracy, while collaborating on a global team and

Qualifications

• 5+ years in data protection or related security tools (EDR, SIEM, SOAR).
• 2+ years in Insider Threat or InfoSec.
• Strong endpoint protection and incident mitigation workflows.
• Experience with DLP, Insider Threat, CASB and data controls.

Responsibilities

• Provide insight into DLP analytics and related issues.
• Analyze DDR platform event data to improve policies and incidents/alerts.
• Refine datasets and policies as customer risk strategy evolves.
• Prepare and present summaries and reports to internal teams.
• Eliminate noise and false positives to improve detection accuracy.
• Conduct forensic analysis on people, groups, and non-sanctioned egress destinations as requested.

Skills

Data protection experience

Insider Threat/InfoSec

Policy & analytics

Cloud security

Tools

EDR

SIEM

SOAR

DLP

CASB

Job description

About the role

This is an ideal opportunity for a highly motivated individual to get in on the ground floor as we build out our Professional Services and Managed Services functions at Cyberhaven. The Senior Data Protection Analyst holds a key position in providing continuous value for our customers and is responsible for advancing the mission of identifying potential insider threats and investigating endpoint forensic incidents. You will be responsible for performing technical analysis of data security incidents, finding and exposing risk in a customers environment as well as handling documentation and project management aspects of incident response. You will also perform analysis of events and incidents.

What you’ll do

• Provide insight into DLP analytics and related issues.
• Analyze Cyberhaven’s Data Detection and Response (DDR) platform event data to improve policies and incidents/alerts and bring focus to areas where data loss risk may exist.
• Refine datasets and policies and manage them as customers’ data risk strategy matures and business needs evolve.
• Prepare and present summaries and reports to internal team members.
• Eliminate noise and false-positive information from analytic results to enhance detection accuracy.
• Conduct forensic analysis on people, groups, and non sanctioned egress destinations as requested.

Who you are

• 5+ years with data protection or adjacent security tools (EDR, SIEM, SOAR) and 2+ years in Insider Threat/InfoSec.
• Strong grasp of endpoint protection best practices and incident mitigation workflows.
• Experience with DLP, Insider Threat, CASB and controls for handling sensitive data.
• Comfortable across macOS, Linux, Windows and cloud platforms (AWS, GCP, Azure).
• Data & automation: SQL for analysis; build/maintain dashboards; edit XML-based DLP rules; script and use APIs.
• Excellent problem-solving and communication skills; collaborative on a global team; customer-centric with a passion for cloud security and emerging tech.

AI Tools Disclosure:

As part of Cyberhaven's hiring process, we use recruiting tools that include AI-powered features to help with tasks like scheduling, note-taking, workflow automation, and other recruiting activities ("AI Tools"). The AI Tools may process information you provide during the application and interview process. When AI-assisted interview note taking is used, candidates are notified in advance and have the option to opt out of the AI-assisted interview note taking.

Cyberhaven is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.