RemoteWLBRemote only
Back to all jobs
Cyberhaven logo
Remote role · data-pro

Data Protection Analyst

Cyberhaven

Before you apply

Role details

The practical picture
Employment
Full-time

Inside the role

Responsibilities
Investigate insider-threat signals and endpoint forensics for customer environments Analyze data-security incidents and Cyberhaven platform event data to improve policies and reduce data loss risk Partner with clients to develop and refine incident response workflows mapped to their security objectives Prepare formal summaries and present findings to technical and non-technical audiences Collaborate with Product and Development teams to improve data detection and response capabilities Provide forensic analysis on people, groups, and non-sanctioned egress destinations as requested by clients
Qualifications
3+ years working with data protection products, with knowledge of endpoint protection best practices and incident mitigation workflows Expertise with DLP, Insider Threat, and CASB solutions; familiarity with SIEM/SOAR integrations Strong understanding of macOS, Linux, and Windows environments Knowledge of security controls for handling sensitive data types Experience performing technical analysis and managing documentation/project management aspects of incident response Excellent written and verbal communication skills; ability to create management-level presentations
Role signal brief

The role, at a glance

Extracted from the source posting · 95% confidence

Cyberhaven is seeking a Data Protection Analyst for its Professional & Managed Services team in Mexico. The role focuses on investigating insider-threat signals and endpoint forensics, analyzing data-security incidents, and helping customers operationalize Cyberhaven's Data Detection & Response platform to reduce data loss. The position requires a blend of technical security expertise (DLP, insider threat, CASB, SIEM/SOAR), incident response documentation skills, and strong client-facing communication.

What you need

  • 3+ years working with data protection products, with knowledge of endpoint protection best practices and incident mitigation workflows
  • Expertise with DLP, Insider Threat, and CASB solutions; familiarity with SIEM/SOAR integrations
  • Strong understanding of macOS, Linux, and Windows environments
  • Knowledge of security controls for handling sensitive data types
  • Experience performing technical analysis and managing documentation/project management aspects of incident response
  • Excellent written and verbal communication skills; ability to create management-level presentations

What you will own

  • Investigate insider-threat signals and endpoint forensics for customer environments
  • Analyze data-security incidents and Cyberhaven platform event data to improve policies and reduce data loss risk
  • Partner with clients to develop and refine incident response workflows mapped to their security objectives
  • Prepare formal summaries and present findings to technical and non-technical audiences
  • Collaborate with Product and Development teams to improve data detection and response capabilities
  • Provide forensic analysis on people, groups, and non-sanctioned egress destinations as requested by clients
Core skills
DLPInsider ThreatCASBSIEMSOAREndpoint ProtectionForensic AnalysisIncident ResponsemacOSLinux
Internal freshness window ends Oct 22, 2026
View source evidence
  • location “Job location: Mexico Structured Location: Mexico”
  • responsibilities “investigate insider-threat signals and endpoint forensics, analyze data-security incidents, surface risk across customer environments”
  • must_have “3+ years working with data protection products, with knowledge of endpoint protection best practices and incident mitigation workflows”
  • must_have “Expertise with DLP, Insider Threat, and CASB solutions; familiarity with SIEM/SOAR integrations”
  • must_have “Strong understanding of macOS, Linux, and Windows environments”
  • must_have “Knowledge of security controls for handling sensitive data types”
  • must_have “Experience performing technical analysis and managing the documentation/project management aspects of incident response”
  • must_have “Excellent written and verbal communication skills; able to create management-level presentations and analysis”
dlpinsider threatcasbsiem
Role brief

About the role

Join Cyberhaven’s growing Professional & Managed Services team as a Data Protection Analyst. You’ll investigate insider-threat signals and endpoint forensics, analyze data-security incidents, surface risk across customer environments, and handle incident-response documentation/project work. You’ll become an expert in Cyberhaven’s Data Detection & Response platform and help customers operationalize it to reduce data loss. We’re looking for a technically deep, client-obsessed communicator with SaaS data-protection experience who thrives in a fast-paced, high-growth environment, partners well with security/operations teams, and reports to the Head of Global Service.

What you’ll do

  • Serve as a subject matter expert on data protection security issues, understand external DLP market trends, and incorporate these insights to illustrate realized value for our customers

  • Analyze Cyberhaven’s Data Detection and Response platform event data to improve policies and incidents/alerts and bring focus to areas where data loss risk may exist

  • Partner with clients to develop incident response workflows that map to their security objectives and policies

  • Refine datasets and policies and manage them as customers’ data risk strategy matures and business needs evolve

  • Identify trends and drive requirements aimed at improving and enhancing existing data detection and response policies

  • Prepare and present formal summaries to technical and non-technical audiences

  • Collaborate with Cyberhaven’s Product and Development team to develop and implement innovative strategies for monitoring and preventing data loss

  • Eliminate noise and false-positive information from analytic results

  • Provide forensic analysis on people, groups, and non sanctioned egress destinations as requested by clients

Who you are

  • 3+ years working with data protection products, with knowledge of endpoint protection best practices and incident mitigation workflows.

  • Experience advising on security issues affecting data protection and insider risk (both accidental and malicious).

  • Expertise with DLP, Insider Threat, and CASB solutions; familiarity with SIEM/SOAR integrations (including those adjacent to Cyberhaven).

  • Strong understanding of macOS, Linux, and Windows environments.

  • Knowledge of security controls for handling sensitive data types.

  • Experience performing technical analysis and managing the documentation/project management aspects of incident response for data security issues.

  • Familiarity with cloud apps and services; passion for cloud technologies.

  • Excellent problem-solving and analytical abilities; both creative and logical thinking.

  • Customer-centric, highly motivated, with strong empathy and focus.

  • Excellent written and verbal communication skills; able to create management-level presentations and analysis on incident investigations.

  • Effective collaborator in a global, cross-functional team.

Joining Cyberhaven means joining the team building Data Security for the Agentic Enterprise. Traditional tools fall short. Cyberhaven traces the full lifecycle of your data, adapting protection to changing context, so protection moves with the way people actually work, not against it. AI Changed Work. We Protect It.
Backed by $250M from leading investors like Khosla and Redpoint, our team includes leaders who built industry-defining technologies at CrowdStrike, Palo Alto Networks, Meta, Google, and more. This role lets you shape the future of data security, working alongside people driven to protect workflows, not just data, for customers who cannot afford to slow down to stay safe.

AI Tools Disclosure: As part of Cyberhaven's hiring process, we use recruiting tools that include AI-powered features to help with tasks like scheduling, note-taking, workflow automation, and other recruiting activities ("AI Tools"). The AI Tools may process information you provide during the application and interview process. When AI-assisted interview note taking is used, candidates are notified in advance and have the option to opt out of the AI-assisted interview note taking.

Cyberhaven is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.