数据保护分析师
Data Protection Analyst
**关于职位**
这是为一位积极进取的个人提供的绝佳机会，随着 Cyberhaven 在专业服务和托管服务职能方面的扩展，你将有机会从早期阶段参与其中。数据保护分析师在为客户提供持续价值方面发挥关键作用，并负责推进识别潜在内部威胁和调查端点取证事件的任务。你将负责对数据安全事件进行技术分析，发现并揭示客户环境中的风险，以及处理事件响应的文档和项目管理方面的工作。你还将进行事件和事件的分析。
**你将负责**
- 提供对 DLP 分析和相关问题的见解。
- 分析 Cyberhaven 的数据检测与响应（DDR）平台事件数据，以改进策略和事件/警报，并关注可能存在数据丢失风险的区域。
- 优化数据集和策略，并根据客户的数据风险策略成熟度和业务需求的变化进行管理。
- 准备并向内部团队成员汇报总结和报告。
- 从分析结果中消除噪音和误报信息，以提高检测准确性。
- 根据要求对人员、组和非授权出口目的地进行取证分析。
**你具备**
- 2–5年数据保护或相关安全工具（EDR、SIEM、SOAR）经验，以及2年以上内部威胁/信息安全经验。
- 熟悉端点保护最佳实践和事件缓解工作流程。
- 具有 DLP、内部威胁、CASB 以及处理敏感数据的控制经验。
- 熟练使用 macOS、Linux、Windows 和云平台（AWS、GCP、Azure）。
- 数据与自动化：使用 SQL 进行分析；构建和维护仪表板；编辑基于 XML 的 DLP 规则；编写脚本和使用 API。
- 优秀的解决问题和沟通能力；能够在全球团队中协作；以客户为中心，对云安全和新兴技术充满热情。
加入 Cyberhaven 意味着加入一支正在为智能企业打造数据安全的团队。传统工具无法满足需求。Cyberhaven 追踪数据的完整生命周期，根据变化的上下文调整保护措施，使保护措施随着人们实际的工作方式而移动，而不是与其对抗。AI 改变了工作方式。我们保护它。
由 Khosla 和 Redpoint 等领先投资者注资2.5亿美元，我们的团队包括曾在 CrowdStrike、Palo Alto 等公司打造行业定义技术的领导者。
查看英文原文
**About the role**
Join Cyberhaven’s growing Professional & Managed Services team as a Data Protection Analyst. You’ll investigate insider-threat signals and endpoint forensics, analyze data-security incidents, surface risk across customer environments, and handle incident-response documentation/project work. You’ll become an expert in Cyberhaven’s Data Detection & Response platform and help customers operationalize it to reduce data loss. We’re looking for a technically deep, client-obsessed communicator with SaaS data-protection experience who thrives in a fast-paced, high-growth environment, partners well with security/operations teams, and reports to the Head of Global Service.
**What you’ll do**
- Serve as a subject matter expert on data protection security issues, understand external DLP market trends, and incorporate these insights to illustrate realized value for our customers
- Analyze Cyberhaven’s Data Detection and Response platform event data to improve policies and incidents/alerts and bring focus to areas where data loss risk may exist
- Partner with clients to develop incident response workflows that map to their security objectives and policies
- Refine datasets and policies and manage them as customers’ data risk strategy matures and business needs evolve
- Identify trends and drive requirements aimed at improving and enhancing existing data detection and response policies
- Prepare and present formal summaries to technical and non-technical audiences
- Collaborate with Cyberhaven’s Product and Development team to develop and implement innovative strategies for monitoring and preventing data loss
- Eliminate noise and false-positive information from analytic results
- Provide forensic analysis on people, groups, and non sanctioned egress destinations as requested by clients
**Who you are**
- 3+ years working with data protection products, with knowledge of endpoint protection best practices and incident mitigation workflows.
- Experience advising on security issues affecting data protection and insider risk (both accidental and malicious).
- Expertise with DLP, Insider Threat, and CASB solutions; familiarity with SIEM/SOAR integrations (including those adjacent to Cyberhaven).
- Strong understanding of macOS, Linux, and Windows environments.
- Knowledge of security controls for handling sensitive data types.
- Experience performing technical analysis and managing the documentation/project management aspects of incident response for data security issues.
- Familiarity with cloud apps and services; passion for cloud technologies.
- Excellent problem-solving and analytical abilities; both creative and logical thinking.
- Customer-centric, highly motivated, with strong empathy and focus.
- Excellent written and verbal communication skills; able to create management-level presentations and analysis on incident investigations.
- Effective collaborator in a global, cross-functional team.
Joining Cyberhaven means joining the team building Data Security for the Agentic Enterprise. Traditional tools fall short. Cyberhaven traces the full lifecycle of your data, adapting protection to changing context, so protection moves with the way people actually work, not against it. AI Changed Work. We Protect It.
Backed by $250M from leading investors like Khosla and Redpoint, our team includes leaders who built industry-defining technologies at CrowdStrike, Palo Alto Networks, Meta, Google, and more. This role lets you shape the future of data security, working alongside people driven to protect workflows, not just data, for customers who cannot afford to slow down to stay safe.
**AI Tools Disclosure:** As part of Cyberhaven's hiring process, we use recruiting tools that include AI-powered features to help with tasks like scheduling, note-taking, workflow automation, and other recruiting activities ("AI Tools"). The AI Tools may process information you provide during the application and interview process. When AI-assisted interview note taking is used, candidates are notified in advance and have the option to opt out of the AI-assisted interview note taking.
_Cyberhaven is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status._