Data Loss Prevention Analyst

Emploi pas sur LinkedIn

🕒 il y a 6 mois

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

🧐 Analyste

👻 Score fantôme 27%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Nightfall AI

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2018

🔒 Cybersecurity

🤖 Intelligence artificielle

☁️ SaaS

💰 €40 000 000 Series B - Nightfall en 2022-08

Cybersecurity • Artificial Intelligence • SaaS

Nightfall AI est une plateforme de prévention de la perte de données (DLP) native à l'intelligence artificielle qui empêche l'exposition et l'exfiltration de données sensibles sur les applications SaaS, les périphériques, les navigateurs, les emails et les outils d'IA générative. L'entreprise combine les modèles LLM, de vision par ordinateur, et la traçabilité des données pilotée par l'IA pour détecter et bloquer les secrets, les PHI, les PCI, les PII et autres contenus confidentiels en temps réel, tout en fournissant une remédiation automatisée et l'application contextuelle des politiques. Nightfall est proposé en tant que plateforme SaaS avec des intégrations API, des agents légers, et des plugins de navigateur, ciblant les entreprises recherchant une protection autonome et hautement précise contre les risques internes, les fuites de Shadow AI, et les tentatives d'exfiltration sophistiquées.

Description

• Monitor and analyze DLP alerts across endpoint, browsers, SaaS, and AI applications to identify potential data exfiltration events, policy violations, and insider threats • Conduct real-time triage of security alerts, distinguishing between true positives and false positives using behavioral context, data lineage analysis and sensitive findings • Perform detailed forensic investigations into data loss incidents, analyzing user activity, data movement patterns, and exfiltration vectors (email, web uploads, removable storage, print, source code exfiltration, desktop apps, GenAI apps etc.) • Understand and follow incident response processes and escalation procedures, coordinating with customer incident response teams on high-severity cases • Document investigation findings, evidence trails, and remediation recommendations with clear, actionable reports • Configure and maintain DLP policies based on customer data classification schemes, compliance requirements (GDPR, HIPAA, PCI-DSS, SOX), and business objectives • Continuously tune detection rules and sensitivity thresholds to reduce false positives while maintaining high detection accuracy • Identify patterns in alert data to recommend new use cases, detection methods, and policy improvements • Serve as a trusted technical advisor and subject matter expert on data protection, DLP best practices, and insider threat management • Administer Nightfall's DLP solution including agent deployment, policy configuration, integration setup, and performance monitoring • Stay informed about emerging insider threat trends, data exfiltration techniques, and adversary tactics, techniques, and procedures (TTPs).

🎯 Exigences

• 3-5 years of experience in information security, with at least 2 years focused on data loss prevention (DLP), insider threat, or data protection technologies • Hands-on experience with DLP tools (e.g., Forcepoint, Symantec, McAfee, Digital Guardian, Microsoft Purview, or other enterprise DLP solutions) • Proven DLP administration skills: configuring policies, tuning detection rules, managing agents, generating reports, and performing incident investigations • Strong understanding of data classification methodologies, sensitive data types (PII, PHI, PCI, IP, credentials), and regex/pattern matching for content inspection • Experience with incident response processes, forensic investigation techniques, and security event escalation workflows • Knowledge of compliance frameworks and regulations: GDPR, HIPAA, PCI-DSS, SOX, and their data protection requirements • Strong analytical skills - ability to analyze complex, multivariate security problems and use systematic approaches to reach resolution • Experience with SIEM platforms, SOAR tools, or log analysis software (Splunk, ELK, Tines etc) • Familiarity with User and Entity Behavior Analytics (UEBA) and behavioral risk indicators • Understanding of endpoint security, including macOS, Windows, and browser platforms • Knowledge of SaaS security, CASB solutions, and cloud application architectures (Office 365, Google Workspace, Slack, GitHub, Salesforce, etc.) • Basic scripting skills (Python, PowerShell, Bash) for automation and data analysis. • Prior experience with Nightfall, Cyberhaven, Code42, DTEX, Proofpoint, or similar DLP/insider risk platforms • Background in Security Operations Center (SOC) operations, threat hunting, or blue team activities • Knowledge of machine learning/AI-based detection systems and how they improve upon traditional pattern-matching approaches • Understanding of API security, OAuth flows, and integration architectures for SaaS platforms • Contributions to security community: blog posts, speaking engagements, open-source projects, or threat research.

🏖️ Avantages

• Employee compensation will be determined based on interview performance, level of experience, specialization of skills, and market rate. During the offer discussion, your recruiter will review the finalized base salary, bonus (for applicable roles), benefits & perks, and stock options as they’ll be reflected in the offer letter.