Data Protection Analyst

About the role

Join Cyberhaven’s growing Professional & Managed Services team as a Data Protection Analyst. You’ll investigate insider-threat signals and endpoint forensics, analyze data-security incidents, surface risk across customer environments, and handle incident-response documentation/project work. You’ll become an expert in Cyberhaven’s Data Detection & Response platform and help customers operationalize it to reduce data loss. We’re looking for a technically deep, client-obsessed communicator with SaaS data-protection experience who thrives in a fast-paced, high-growth environment, partners well with security/operations teams, and reports to the Head of Global Service.

What you’ll do

• Serve as a subject matter expert on data protection security issues, understand external DLP market trends, and incorporate these insights to illustrate realized value for our customers

• Analyze Cyberhaven’s Data Detection and Response platform event data to improve policies and incidents/alerts and bring focus to areas where data loss risk may exist

• Partner with clients to develop incident response workflows that map to their security objectives and policies

• Refine datasets and policies and manage them as customers’ data risk strategy matures and business needs evolve

• Identify trends and drive requirements aimed at improving and enhancing existing data detection and response policies

• Prepare and present formal summaries to technical and non-technical audiences

• Collaborate with Cyberhaven’s Product and Development team to develop and implement innovative strategies for monitoring and preventing data loss

• Eliminate noise and false-positive information from analytic results

• Provide forensic analysis on people, groups, and non sanctioned egress destinations as requested by clients

Who you are

• 3+ years working with data protection products, with knowledge of endpoint protection best practices and incident mitigation workflows.

• Experience advising on security issues affecting data protection and insider risk (both accidental and malicious).

• Expertise with DLP, Insider Threat, and CASB solutions; familiarity with SIEM/SOAR integrations (including those adjacent to Cyberhaven).

• Strong understanding of macOS, Linux, and Windows environments.

• Knowledge of security controls for handling sensitive data types.

• Experience performing technical analysis and managing the documentation/project management aspects of incident response for data security issues.

• Familiarity with cloud apps and services; passion for cloud technologies.

• Excellent problem-solving and analytical abilities; both creative and logical thinking.

• Customer-centric, highly motivated, with strong empathy and focus.

• Excellent written and verbal communication skills; able to create management-level presentations and analysis on incident investigations.

• Effective collaborator in a global, cross-functional team.

Joining Cyberhaven means joining the team building Data Security for the Agentic Enterprise. Traditional tools fall short. Cyberhaven traces the full lifecycle of your data, adapting protection to changing context, so protection moves with the way people actually work, not against it. AI Changed Work. We Protect It.

Backed by $250M from leading investors like Khosla and Redpoint, our team includes leaders who built industry-defining technologies at CrowdStrike, Palo Alto Networks, Meta, Google, and more. This role lets you shape the future of data security, working alongside people driven to protect workflows, not just data, for customers who cannot afford to slow down to stay safe.

AI Tools Disclosure: As part of Cyberhaven's hiring process, we use recruiting tools that include AI-powered features to help with tasks like scheduling, note-taking, workflow automation, and other recruiting activities ("AI Tools"). The AI Tools may process information you provide during the application and interv