Security Analyst Intermediate

About the role

Support enterprise cybersecurity and data protection operations across the organization. Monitor and administer Data Loss Prevention (DLP) policies and controls to safeguard sensitive information. Investigate potential data loss, unauthorized access, and data exposure incidents. Support Data Security Posture Management (DSPM) initiatives for AI technologies, including Microsoft Copilot and other AI-enabled platforms. Review and analyze the movement, storage, and sharing of sensitive information to ensure compliance with data governance policies. Assist in implementing data classification standards and secure data handling practices. Monitor and triage security alerts generated by DLP, Insider Risk Management, DSPM, and other security monitoring platforms. Investigate suspicious user activities involving sensitive information and document findings in accordance with established procedures. Escalate security incidents and assist with containment, recovery, and post-incident response activities. Monitor Insider Risk Management cases and analyze user activities related to potential policy violations. Recommend corrective actions and risk mitigation strategies based on investigation findings.

Responsibilities

• Support enterprise cybersecurity and data protection operations
• Monitor and administer Data Loss Prevention (DLP) policies and controls
• Investigate potential data loss, unauthorized access, and data exposure incidents
• Support Data Security Posture Management (DSPM) initiatives
• Review and analyze the movement, storage, and sharing of sensitive information
• Maintain and refine DLP policies and Insider Risk Management alerts
• Escalate security incidents and assist with containment, recovery, and post-incident response activities
• Monitor Insider Risk Management cases and analyze user activities related to potential policy violations
• Recommend corrective actions and risk mitigation strategies based on investigation findings
• Collaborate with technical and business teams to strengthen the organization's overall cybersecurity and data governance posture
• Participate in cybersecurity awareness initiatives and recommend improvements to security policies, procedures, and controls

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
• Foundational cybersecurity certification such as CompTIA Security+ or GIAC Security Essentials (GSEC)
• 3-5+ years of experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis
• Minimum 3 years of hands-on experience with Data Loss Prevention (DLP), Insider Risk Management, and Data Security Posture Management (DSPM) technologies
• Experience reviewing and triaging security alerts, investigating sensitive data access and movement, documenting findings, and escalating incidents
• Experience collaborating with technical and non-technical teams to resolve security issues and improve data security posture
• Strong analytical, problem-solving, documentation, and communication skills

Qualifications

• Preferred certifications: Microsoft SC-100 Cybersecurity Architect, Microsoft SC-200 Security Operations Analyst, Certified Ethical Hacker (CEH), Associate-level CISSP certification
• Experience with AI-driven security tools, including Cortex and DSPM platforms supporting AI environments
• Experience fine-tuning DLP policies and Insider Risk Management alerts
• Knowledge of data governance programs and information protection strategies
• Experience with Microsoft Azure security, identity and access management, and Conditional Access
• Experience with security automation and scripting