📋 Description

• Provide insight into DLP analytics and related issues.
• Analyze Cyberhaven’s DDR platform event data to improve policies and incidents/alerts and focus
• Refine datasets and policies as customers’ data risk strategy matures and business needs evolve.
• Prepare and present summaries and reports to internal team members.
• Eliminate noise and false-positive information to enhance detection accuracy.
• Conduct forensic analysis on people, groups, and non sanctioned egress destinations as requested.

🎯 Requirements

• 2–5 years with data protection or adjacent security tools (EDR, SIEM, SOAR) and 2+ years in Insider
• Strong grasp of endpoint protection best practices and incident mitigation workflows.
• Experience with DLP, Insider Threat, CASB and controls for handling sensitive data.
• Comfortable across macOS, Linux, Windows and cloud platforms (AWS, GCP, Azure).
• Data & automation: SQL for analysis; build/maintain dashboards; edit XML-based DLP rules
• Excellent problem-solving and communication skills; collaborative on a global team

🎁 Benefits

• AI Tools Disclosure and equal opportunity employer information included in the posting.