SOC Analyst

SOC Analyst

About the Role

We are looking for an Information Protection Analyst to support cybersecurity operations focused on protecting sensitive business information and reducing data leakage risks.

In this role, you will investigate security events related to data movement and handling, assess potential policy violations, manage business exceptions, and help improve Data Loss Prevention controls. You will cooperate with security, compliance, data protection, application, and business teams to ensure that security requirements remain effective without unnecessarily disrupting business operations.

What You’ll Do

• Investigate alerts related to potentially unauthorized or suspicious handling of sensitive information.
• Analyze data transfers across email, endpoints, cloud applications, collaboration platforms, and removable media.
• Assess incidents based on severity, scope, business impact, and potential security or compliance risk.
• Verify suspected policy violations and identify false positives.
• Escalate confirmed security incidents and support remediation activities.
• Document investigation findings, root causes, decisions, and corrective actions.
• Review business requests requiring exceptions from existing data protection controls.
• Assess business justification and associated security and compliance risks.
• Coordinate exception approvals with relevant security, privacy, compliance, and business stakeholders.
• Ensure approved exceptions are documented, time-limited, monitored, and periodically reviewed.
• Recommend compensating controls where exceptions introduce additional risk.
• Support the configuration, maintenance, and continuous improvement of DLP policies.
• Identify opportunities to reduce false positives and improve detection effectiveness.
• Support audits by providing evidence related to incidents, exceptions, and implemented controls.
• Contribute to security awareness and continuous improvement initiatives related to information protection.

What We’re Looking For

• min.4 years of experience in Security Operations, Cybersecurity Operations, SOC, or a role focused on data protection.
• Experience investigating cybersecurity alerts and incidents.
• Good understanding of Data Loss Prevention concepts and information protection controls.
• Knowledge of data classification, information labeling, and data protection principles.
• Understanding of incident management and risk assessment processes.
• Familiarity with GDPR, privacy requirements, and Insider Risk Management.
• Ability to work with both technical and business stakeholders.
• Strong analytical and investigative skills.
• Good documentation and organizational skills.
• Ability to manage multiple cases and priorities in a dynamic environment.

Technologies & Security Areas

Hands-on experience with DLP solutions such as:

• Microsoft Purview DLP
• Proofpoint DLP

Knowledge of areas including:

• Data Loss Prevention
• Data classification and labeling
• Insider Risk Management
• Security monitoring
• Incident response
• Privacy and data protection regulations

A degree in Cybersecurity, Information Security, Computer Science, or a related field would be an advantage.