Messaging, Cloud, and Data Security I Analyst II (Data Loss Prevention)

Philippines·Mandaluyong Citymid

Other

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

POSITION SUMMARY The Data Loss Prevention (DLP) Analyst is responsible for supporting the organization’s data protection program by monitoring, analyzing,

Technical Tools

Other

The Data Loss Prevention (DLP) Analyst is responsible for supporting the organization’s data protection program by monitoring, analyzing, and responding to data loss risks and incidents. This role focuses on identifying potential data exfiltration, misuse, or policy violations across endpoints, networks, cloud platforms, and user activities.

The DLP Analyst works closely with Security Operations, IT, Legal, and Compliance teams to investigate alerts, enforce data protection policies, and ensure sensitive information is properly safeguarded. The ideal candidate possesses a strong analytical mindset, attention to detail, and foundational knowledge of cybersecurity, data protection, and incident response processes.

Responsibilities

~1 min read

Monitor DLP alerts and events across endpoints, network, email, and cloud platforms.
Perform initial triage and validation of DLP alerts to identify true positives and reduce false positives.
Analyze user activities and data movement patterns to detect potential data leakage or policy violations.
Escalate high-risk or complex incidents to senior analysts or management as appropriate.

Support investigations of data loss incidents, insider threats, and potential data exfiltration cases.

Collect and analyze relevant logs, audit trails, and forensic data to determine the scope and impact of incidents.

Document findings, actions taken, and outcomes in accordance with established procedures.

Assist in containment and remediation activities under guidance from senior team members.

Assist in the implementation, tuning, and maintenance of DLP policies and detection rules.

Support data classification and labeling initiatives to improve visibility of sensitive data.

Help optimize DLP controls to reduce alert noise and improve detection accuracy.

Participate in testing and validation of new DLP use cases and controls.

Coordinate with IT, Security Operations, and business units to validate alerts and support investigations.

Work with Legal, HR, and Compliance teams when handling sensitive or insider-related cases.

Provide input to improve processes, workflows, and playbooks related to DLP operations.

Support audit activities by gathering and providing evidence related to DLP controls and incidents.

Ensure adherence to data protection policies, standards, and regulatory requirements.

Assist in identifying data protection risks and recommending improvements.

Track and report basic DLP metrics such as alert volumes, false positives, and incident trends.

Contribute to continuous improvement initiatives to enhance DLP detection and response capabilities.

Stay updated on emerging threats, data protection trends, and DLP technologies.

Requirements

~1 min read

2–5 years of experience in Information Security, SOC operations, or data protection-related roles.
Exposure to DLP tools and technologies (e.g., Microsoft Purview, Symantec, Forcepoint, Netskope) is preferred.
Experience in security monitoring, alert triage, or incident response is an advantage.

Basic understanding of data protection concepts, including data classification and data lifecycle.
Familiarity with endpoint, email, and cloud security principles.
Experience with log analysis and security monitoring tools (e.g., SIEM platforms).
Knowledge of Microsoft 365 security and compliance features is a plus.
Basic scripting or automation skills (e.g., PowerShell, Python) are an advantage.