Data Protection Security Researcher
Confirmed on the employer's own hiring board on Oct 29, 2026. First seen by Alion on Oct 28, 2026.
Description
Legacy DLP was built on rigid rules, and security teams pay for it in noise, blind spots and endless investigation work. Jazz replaces that model. A lightweight endpoint agent (less than 1% CPU, no browser extension) captures how data actually moves across an organization, including GenAI prompts, clipboard activity, screenshots and personal cloud uploads. Melody, our Agentic Investigator, then investigates each potentially risky data flow across four dimensions: the data, the systems, the people and the business. Customers get pre-investigated incidents instead of alert queues. In a typical 30-day deployment, Jazz processes 2M signals and surfaces around 80 SOC-ready incidents.
Jazz won the 2026 CrowdStrike / AWS / NVIDIA Startup Nest, and we are growing the research team that shapes how Melody understands our customers.
About the role
As a Data Protection Security Researcher, you will own the data protection programs of our customers from the research side and be directly responsible for the quality of Melody's investigations. You will work with Melody to learn each customer's business workflows, find where her verdicts are wrong or incomplete, and improve precision and recall across our whole customer base. You will sit between customers, Customer Success, Product and R&D, and turn what you see in real environments into measurable improvements in detection quality.
What you'll do
- Manage DLP programs for a portfolio of customers: onboard them, share business context with Melody, review investigated incidents, and run regular program reviews with their security teams.
- Own Melody's detection quality. Define, measure, and improve precision and recall per customer and across the platform.
- Analyze missed detections and incorrect verdicts, find the root cause (data understanding, system context, user behavior or business context), and drive the fix with Product and R&D.
- Build and maintain labeled evaluation datasets and benchmarks for data exfiltration scenarios, including GenAI usage, insider risk, departing employees, secrets sprawl, and regulated data (PII, PHI, PCI).
- Write Python and SQL to explore customer telemetry, quantify detection gaps, and automate quality analysis and reporting.
- Research new data loss vectors and attacker techniques, and translate them into scenarios Melody should understand.
- Act as a DLP and SOC subject matter expert for customers and for internal teams.
What you need to have
- 3+ years of hands-on experience with DLP: designing, operating, or managing DLP programs (for example, Microsoft Purview, Forcepoint, Symantec, Netskope, Digital Guardian, Code42, or similar).
- SOC experience: triaging and investigating security events, incident response, and working with SIEM or XDR tools.
- Strong Python for data analysis and automation (pandas or similar).
- Strong SQL for querying and analyzing large datasets.
- A solid grasp of detection quality metrics (precision, recall, false positives, and false negatives) and how to improve them in practice.
- Understanding of data protection regulations and frameworks such as GDPR, HIPAA, PCI DSS, SOX, or FERPA.
- Comfort working directly with customers and clearly explaining findings to both analysts and CISOs.
- Fluent in English, written and spoken.
Why join Jazz?
- The norms you make in your first six months are the ones Jazz lives with. Join a small, senior team building a new category of DLP.
- Direct impact on the core of the product: your work decides how well Melody understands customers.
- Exposure to real data protection problems across many industries, from healthcare and education to finance.
- AI-native! Our product is built on agentic AI and so is the way we work. Heavy AI use isn't tolerated here, it's the expectation.
- Stage and backing. $61M from Glilot and Team8, out of stealth in March 2026, founded by Unit 81 veterans who have built and scaled security products before. Early enough that ownership is real, funded enough that the runway is too.
- A team worth joining.
Our office is at Sonol Tower in Tel Aviv, next to Carlebach train station.