CareerPlanGet AI match score →

Data Protection Analyst

💼 Full-time🗓 2026-07-25

Core

Analyze data security incidents and endpoint forensic events to identify insider threats and data loss risks for customers.

Role type

Data Protection Analyst (Incident Response & Forensics)

Builds

Data Detection and Response (DDR) platform policies, detection rules, and incident response documentation.

Domain

Cybersecurity, Data Loss Prevention (DLP), Insider Threat

Deliverable

production ML models | product features | dashboards & analysis | client delivery

Required skills

DLP analytics, endpoint protection workflows, forensic analysis, SQL, XML rule editing, API scripting, cloud platform familiarity (AWS/GCP/Azure), macOS/Linux/Windows administration

Preferred skills

Insider Threat investigation, SIEM/SOAR tool experience, data automation

Technologies

SQL, XML, AWS, GCP, Azure, macOS, Linux, Windows, EDR, SIEM, SOAR

Responsibilities

Analyze DLP analytics to improve policies and reduce false positives; refine datasets and manage customer data risk strategies; conduct forensic analysis on people, groups, and egress destinations; prepare and present incident response reports.

Seniority

Mid-level, hands-on IC

Rewrite
## About the role This is an ideal opportunity for a highly motivated individual to get in on the ground floor as we build out our Professional Services and Managed Services functions at Cyberhaven. The Data Protection Analyst holds a key position in providing continuous value for our customers and is responsible for advancing the mission of identifying potential insider threats and investigating endpoint forensic incidents. You will be responsible for performing technical analysis of data security incidents, finding and exposing risk in a customers environment as well as handling documentation and project management aspects of incident response. You will also perform analysis of events and incidents. ## Responsibilities - Provide insight into DLP analytics and related issues. - Analyze Cyberhaven's Data Detection and Response (DDR) platform event data to improve policies and incidents/alerts and bring focus to areas where data loss risk may exist. - Refine datasets and policies and manage them as customers' data risk strategy matures and business needs evolve. - Prepare and present summaries and reports to internal team members. - Eliminate noise and false-positive information from analytic results to enhance detection accuracy. - Conduct forensic analysis on people, groups, and non sanctioned egress destinations as requested. ## Requirements - 2–5 years with data protection or adjacent security tools (EDR, SIEM, SOAR) and 2+ years in Insider Threat/InfoSec. - Strong grasp of endpoint protection best practices and incident mitigation workflows. - Experience with DLP, Insider Threat, CASB and controls for handling sensitive data. - Comfortable across macOS, Linux, Windows and cloud platforms (AWS, GCP, Azure). - Data & automation: SQL for analysis; build/maintain dashboards; edit XML-based DLP rules; script and use APIs. - Excellent problem-solving and communication skills; collaborative on a global team; customer-centric with a passion for cloud security and emerging tech. ## About the company Joining Cyberhaven is a chance to revolutionize data security. Traditional tools fall short, but we've reimagined protection with AI-enabled data lineage that analyzes billions of workflows to understand data, detect risk, and stop threats. Backed by $250M from leading investors like Khosla and Redpoint, our team includes leaders who built industry-defining technologies at CrowdStrike, Palo Alto Networks, Meta, Google, and more. This role lets you shape the future of data security, alongside experts driven to help customers protect their most valuable information. Cyberhaven is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Sourced via wellfound · Listed on CareerPlan, which tracks 70,000+ jobs from 20+ sources.
Apply on Wellfound ↗