Senior Data Protection & Incident Response Analyst

Cyberhaven; Morrisville, Jeffersonville (NC, IN); On-site; USD 120,000 - 180,000; Full time

Job summary

Cyberhaven seeks a Senior Data Protection Analyst to join our Professional Services and Managed Services teams. You will analyze data security incidents, identify insider threat risks, and manage incident response documentation and project tasks.

You will work across macOS, Linux, Windows and cloud platforms (AWS, GCP, Azure) to tune DLP policies, build dashboards, and present findings to clients and internal teams. This is a hands-on, global role focused on data security.

Qualifications

• 5+ years with data protection or adjacent security tools (EDR, SIEM, SOAR) and 2+ years in Insider Threat/InfoSec.
• Strong grasp of endpoint protection best practices and incident mitigation workflows.
• Experience with DLP, Insider Threat, CASB and controls for handling sensitive data.
• Comfortable across macOS, Linux, Windows and cloud platforms (AWS, GCP, Azure).
• Data & automation: SQL for analysis; build/maintain dashboards; edit XML-based DLP rules; script and use APIs.
• Excellent problem-solving and communication skills; collaborative on a global team; customer-centric with a passion for cloud security and emerging tech.

Responsibilities

• Provide insight into DLP analytics and related issues.
• Analyze Cyberhaven’s Data Detection and Response (DDR) platform event data to improve policies and incidents/alerts and bring focus to areas where data loss risk may exist.
• Refine datasets and policies and manage them as customers’ data risk strategy matures and business needs evolve.
• Prepare and present summaries and reports to internal team members.
• Eliminate noise and false-positive information from analytic results to enhance detection accuracy.
• Conduct forensic analysis on people, groups, and non sanctioned egress destinations as requested.

Skills

Data protection

EDR

SIEM

SOAR

Insider Threat

InfoSec

DLP

CASB

Cloud platforms

SQL

Dashboards

XML DLP rules

APIs

macOS

Linux

Windows

AWS

GCP

Azure

Job description

Cyberhaven seeks a Senior Data Protection Analyst to join our Professional Services and Managed Services teams. You will analyze data security incidents, identify insider threat risks, and manage incident response documentation and project tasks.

You will work across macOS, Linux, Windows and cloud platforms (AWS, GCP, Azure) to tune DLP policies, build dashboards, and present findings to clients and internal teams. This is a hands-on, global role focused on data security.