Cyberhaven logo

Senior Data Protection Analyst

Cyberhaven·Salary not specified

Primary stack

APISQL

Nice to have's

EDRSIEMSOARInfoSecendpoint protectionincident mitigation

Job description

About the Position

Senior Data Protection Analyst

US Remote

This is an ideal opportunity for a highly motivated individual to get in on the ground floor as we build out our Professional Services and Managed Services functions at Cyberhaven. The Senior Data Protection Analyst holds a key position in providing continuous value for our customers and is responsible for advancing the mission of identifying potential insider threats and investigating endpoint forensic incidents. You will be responsible for performing technical analysis of data security incidents, finding and exposing risk in a customer's environment as well as handling documentation and project management aspects of incident response. You will also perform analysis of events and incidents.

Joining Cyberhaven means joining the team building Data Security for the Agentic Enterprise. Traditional tools fall short. Cyberhaven traces the full lifecycle of your data, adapting protection to changing context, so protection moves with the way people actually work, not against it. AI Changed Work. We Protect It.

Backed by $250M from leading investors like Khosla and Redpoint, our team includes leaders who built industry-defining technologies at CrowdStrike, Palo Alto Networks, Meta, Google, and more. This role lets you shape the future of data security, working alongside people driven to protect workflows, not just data, for customers who cannot afford to slow down to stay safe.

AI Tools Disclosure: As part of Cyberhaven's hiring process, we use recruiting tools that include AI-powered features to help with tasks like scheduling, note-taking, workflow automation, and other recruiting activities ("AI Tools"). The AI Tools may process information you provide during the application and interview process. When AI-assisted interview note taking is used, candidates are notified in advance and have the option to opt out of the AI-assisted interview note taking.

Cyberhaven is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Responsibilities

  • Provide insight into DLP analytics and related issues.
  • Analyze Cyberhaven’s Data Detection and Response (DDR) platform event data to improve policies and incidents/alerts and bring focus to areas where data loss risk may exist.
  • Refine datasets and policies and manage them as customers’ data risk strategy matures and business needs evolve.
  • Prepare and present summaries and reports to internal team members.
  • Eliminate noise and false-positive information from analytic results to enhance detection accuracy.
  • Conduct forensic analysis on people, groups, and non-sanctioned egress destinations as requested.

Requirements

  • 5+ years with data protection or adjacent security tools (EDR, SIEM, SOAR) and 2+ years in Insider Threat/InfoSec.
  • Strong grasp of endpoint protection best practices and incident mitigation workflows.
  • Experience with DLP, Insider Threat, CASB, and controls for handling sensitive data.
  • Comfortable across macOS, Linux, Windows, and cloud platforms (AWS, GCP, Azure).
  • Data & automation: SQL for analysis; build/maintain dashboards; edit XML-based DLP rules; script and use APIs.
  • Excellent problem-solving and communication skills; collaborative on a global team; customer-centric with a passion for cloud security and emerging tech.

We Offer

  • Opportunity to work with cutting-edge AI tools in data security.
  • Be part of a team that shapes the future of data security.
  • Work with industry leaders from top companies.
  • Competitive compensation and benefits.
  • Remote work options.

About the Company

Cyberhaven is dedicated to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

© Cyberhaven. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.

We’re a hot Silicon Valley startup on a mission to fight data breaches. We’ve got first-of-a-kind technology that analyzes millions of events per second to build a global graph of all data flows across entire companies and uses it to detect exfiltration of critical data in real-time.We raised over $15M from leading Silicon Valley investors (Vertex Ventures and Costanoa Ventures). Cyberhaven is also backed by founders, executives, and security leaders who have built transformational technologies at Facebook, Google, Akamai, Cloudera and others. We have strong demand for our product from the world’s largest companies and we are growing fast. We’re hiring 9 superstar engineers this month to join our core team to accelerate building of this technology and bringing an excellent product to the market.Our ProductThe Cyberhaven product is used by cool companies like Zoom, Motorola, Western Digital, by the U.S. Department of Defense’s DARPA agency (the one that created the Internet!), and others. We’re helping these organizations stop leaks ranging from innocuous product specs leaks to the press, to serious industrial espionage.Check out a video to see how it works:Our Technology StackWe don’t have legacy in our codebase! We build the product from scratch using the following technologies:backend: processing millions of events per second using Go, Elasticsearch, Kafka, Etcd, Redis, Kubernetes, and managing it all using Terraformfrontend: innovative and beautiful UX to present complex data in an easy to understand way using Typescript and Reactwindows: record all data movements in all apps by processing tens of thousands of events per second without any slow down for the user’s work, and stop data exfiltration using C# in userspace and C/C++ in the kernelmacOS: first-class support and feature parity with Windows using SwiftBut it’s not set in stone! Our technology is new and rapidly evolving, so you’ll have a chance to be an early contributor and have a substantial impact on our product architecture and technology choices.Our CultureWe’re a fast-growing startup with Silicon Valley-like culture centered around technological innovation, product excellence, and high impact. By joining our team early on, you will have a direct and visible impact on the company success: the features you’ll build or the bugs you’ll avoid will win the world’s most famous brands as our customers, you will talk to them directly and hear their feedback on your work, and you’ll see your code in action at stopping huge breaches in the real world.

More at Cyberhaven

All 24 roles

Popular searches