Security Analyst with DLP

Job Title: Security Analyst

Location: Columbia, SC 29201

Work Arrangement: Hybrid – 3 days onsite / 2 days remote

Duration: 12 Months

Job Summary: The Security Analyst will support enterprise cybersecurity and data protection operations, with a strong focus on Data Loss Prevention (DLP), Insider Risk Management, AI/Copilot data security, DSPM, security monitoring, auditing, vendor security reviews, and incident response. The role involves investigating sensitive-data activity, triaging security alerts, documenting findings, escalating incidents, and partnering with technical and business teams to improve the organization's security and data-governance posture.

Required Skills

• 3–5 years supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis.
• 3 years hands-on experience with DLP, Insider Risk Management tools, and Data Security Posture Management for AI (DSPM for AI).
• 3 years reviewing and triaging data-security alerts, investigating sensitive-data access/movement, documenting findings, and escalating incidents.
• 3 years collaborating with technical and nontechnical teams to resolve security issues.
• Bachelor's degree in Cybersecurity, IT, Computer Science, or related field; equivalent experience may be considered.
• Security certification such as CompTIA Security or GIAC GSEC required.

Preferred Skills

• Experience with AI-driven security tools, Cortex, and DSPM platforms protecting sensitive data used by AI systems.
• Experience tuning DLP policies and refining Insider Risk alerts.
• Data governance experience.
• Azure Security, identity-based access controls, and Conditional Access.
• Security automation or scripting.
• Certifications: Microsoft SC-100, SC-200, CEH, or Associate-level CISSP.

Key Responsibilities

• Monitor and administer DLP policies and investigate potential data loss/exposure.
• Support DSPM initiatives related to AI and Microsoft Copilot.
• Triage alerts from DLP, Insider Risk, DSPM, and other security platforms.
• Investigate suspicious user activity and sensitive-data access.
• Support incident containment, recovery, and post-incident activities.
• Conduct Insider Risk investigations while maintaining confidentiality and proper evidence handling.
• Support third-party/vendor security assessments and remediation tracking.
• Assist with cybersecurity audits, risk assessments, compliance reviews, and control validation.
• Prepare security reports, metrics, and recommendations for improving policies and controls.