Analyst - Cyber Defense
Core
Monitor and triage Data Loss Prevention (DLP) alerts across email, endpoints, and cloud platforms to investigate potential data loss events and protect enterprise information.
Role type
Cyber Defense Analyst (DLP Operations)
Builds
Operational insights, tuning recommendations, and policy-level suggestions for the DLP Committee
Domain
Cybersecurity / Data Loss Prevention
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
DLP alert triage, incident investigation, evidence collection, risk assessment, process improvement, operational reporting, automation identification
Preferred skills
Insider threat engagement, data classification gap analysis, Microsoft Purview DLP, Microsoft 365 security tools, SIEM, ticketing systems
Technologies
Microsoft Purview DLP, Microsoft 365, SIEM, ticketing systems
Responsibilities
Monitor and triage DLP alerts for email, endpoint, Teams/SharePoint/OneDrive, and cloud activity; Review alert context to validate true positives versus false positives and document outcomes; Escalate confirmed high-risk or repeat data loss events to Incident Response and Insider Risk teams; Identify recurring false positives and process pain points to provide tuning recommendations; Support operational reporting on alert volumes, SLA adherence, and control effectiveness; Identify opportunities to automate repetitive investigation steps
Seniority
Mid-level, hands-on IC
