Cybersecurity Analyst

About the role

Kearney & Company Cybersecurity Analyst will play a key role in safeguarding the organization's data by designing, implementing, and maintaining information protection and data loss prevention (DLP) controls across the Microsoft environment. This role focuses on proactively identifying risks, enforcing security policies, and ensuring sensitive information is appropriately governed and protected.

Responsibilities

• Develop, maintain, and optimize information protection and DLP policies using Microsoft Purview, including sensitivity labels, data classification, and endpoint DLP.
• Monitor and analyze security alerts related to information leakage, unauthorized data access, and policy violations across Microsoft 365, Azure, and connected services.
• Conduct risk assessments to identify gaps in data protection controls and recommend corrective actions.
• Partner with IT, compliance, and business stakeholders to operationalize data protection policies and ensure alignment with regulatory and internal requirements.
• Manage and tune DLP rules to minimize false positives while improving detection accuracy.
• Support investigations into data security incidents, ensuring thorough analysis, documentation, and remediation.
• Oversee lifecycle management of sensitive data, including retention, governance, and secure disposal.
• Create and deliver training materials to raise security awareness related to data handling and protection.
• Maintain expertise in Microsoft information protection tools, emerging threats, and best practices to continuously strengthen the organization's security posture.

Required Qualifications

• Bachelor's degree from an accredited university or equivalent professional experience from a relevant field.
• Minimum 2 years experience managing and supporting Microsoft 365 security features, especially Microsoft Purview Information Protection and DLP.
• Strong understanding of data classification frameworks, regulatory requirements, and information governance concepts.
• Familiarity with Azure Active Directory, Conditional Access, and identity-driven security models.
• Ability to interpret security alerts and logs, conduct incident analysis, and document findings.
• Excellent communication skills with the ability to translate technical controls into business-friendly concepts.
• Ability to obtain and maintain a U.S. security clearance (requires U.S. citizenship).

Preferred Qualifications

• Certifications such as SC-400, SC-200, or related cybersecurity credentials are a plus.

Pay

The expected salary range for this position is between $75,000 and $90,000. This range is representative of base pay only and does not include straight time pay for hours worked over 40 per week, company contributions towards paid benefits, and/or bonuses. Actual compensation will be determined based on specific experience, education, work location, clearance level, and other factors permitted by law. This position is eligible for bonuses (when applicable).

Benefits

• Medical, Dental, Vision, Life, AD&D, and Disability Insurance
• 401(k) Retirement Plan and 529 Education Savings Plan
• Flexible Spending & Health Savings Account
• Accident, Critical Illness, Hospital Indemnity Insurances
• Legal Insurance and Pet Insurance
• Employee Assistance Program, fitness and wellness benefits, and other firm benefits
• Paid holidays, vacation, and sick time