Job Description
Title: Security Analyst - Hybrid
Mandatory skills: enterprise cybersecurity operations, threat monitoring, incident response, risk analysis, data protection technologies, data loss prevention, DLP, insider risk management tools, data security posture management, AI, reviewing, triaging data related security alerts, analyzing access, movement of sensitive information, documenting findings, escalating incidents, security issues, data security posture, data classification, data handling requirements, data governance initiatives, AI driven security tools, Cortex, DSPM platforms, manage sensitive data, AI systems, finetuning DLP policies, refining insider risk alerts, data governance programs, Azure security, identity-based access controls, conditional access, security automation, scripting, cybersecurity, data protection program, protect sensitive information, monitor security risks, strengthen controls, Copilot, Insider Risk, auditing, vendor security, potential data loss, data exposure, unauthorized access incidents, Data Security Posture Management, DSPM
Description: The client is looking for (2) Security Analysts - Intermediate Position Details: This position supports the client's cybersecurity and data protection operations, with a focus on DLP, Insider Risk Management, Copilot/AI data security, auditing, vendor security reviews, and device patching. The analyst will review and triage security alerts, investigate access and movement of sensitive information, perform system and vendor audits, document findings, assist with incident escalation, and work with technical and business teams to strengthen the client's overall security and data governance posture. Must Have/Required Skills The candidate must have 3-5+ years experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis. The candidate must have 3 years hands-on experience working with data protection technologies such as data loss prevention (DLP), insider risk management tools, and data security posture management for AI (DSPM for AI). The candidate must have 3 years experience reviewing and triaging data related security alerts, analyzing access and movement of sensitive information, documenting findings, and escalating incidents according to established procedures. The candidate must also have 3 years of collaborating with technical and nontechnical teams to resolve security issues and supporting continuous improvement in the client's data security posture. Preferred/Nice to Have Skills Experience working with AI driven security tools, Cortex, particularly DSPM platforms designed to manage sensitive data used by AI systems, is preferred. Experience finetuning DLP policies, refining insider risk alerts, or supporting data governance programs is beneficial. Familiarity with Azure security, identity-based access controls, conditional access, and security automation or scripting is also preferred. Required Education and/or Certifications A bachelor's degree in cybersecurity, information technology, computer science, or a related field is required; equivalent experience may be considered. A foundational security certification such as CompTIA Security+ or GIAC Security Essentials (GSEC) is required. Preferred certifications include Microsoft SC100, SC200, CEH, or an Associate level CISSP. Security Analyst Position Summary/Job Purpose: The purpose of this position is to support the client's cybersecurity and data protection program by helping protect sensitive information, monitor security risks, and strengthen controls around AI, Copilot, DLP, Insider Risk, auditing, and vendor security Key Responsibilities/Job Functions: Data Protection & Data Governance Monitor and administer Data Loss Prevention (DLP) policies and controls. Investigate potential data loss, data exposure, and unauthorized access incidents. Support Data Security Posture Management (DSPM) initiatives related to AI and Copilot. Review the movement, storage, and sharing of sensitive information. Assist in implementation of data classification and data handling requirements. Participate in data governance initiatives and support data owners and stewards. Security Monitoring & Incident Response Review and triage security alerts from DLP, Insider Risk Management, DSPM, and other security platforms. Investigate suspicious activity involving sensitive information. Document findings and maintain investigation records. Escalate incidents according to client incident response procedures. Assist with containment, recovery, and post-incident activities. Insider Risk Management Monitor Insider Risk Management alerts and cases. Analyze user activity associated with potential policy violations. Conduct investigations while maintaining confidentiality and proper chain of evidence. Recommend corrective actions and risk mitigation strategies. Vendor Security Management Participate in third-party and vendor security assessments. Review vendor security documentation, audit reports, and questionnaires. Identify cybersecurity risks associated with third-party services. Assist in tracking remediation efforts and risk acceptance decisions. Security Auditing & Compliance Support cybersecurity audits and compliance reviews. Collect and analyze evidence for regulatory and policy requirements. Assist with risk assessments and control validation activities. Maintain documentation supporting compliance efforts. Collaboration & Reporting Work with technical and non-technical staff to address security concerns. Prepare reports, metrics, and presentations regarding security risks and trends. Participate in cybersecurity awareness and training initiatives. Recommend improvements to security policies, procedures, and controls. Required Skills Education Bachelor's degree in cybersecurity, information technology, computer science, or a related field is required; equivalent experience may be considered. Certification Security certification such as CompTIA Security+ or GIAC Security Essentials (GSEC) is required. 3-5+ years of experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis. 3+ years of hands-on experience working with data protection technologies such as data loss prevention (DLP), insider risk management tools, and data security posture management for AI (DSPM for AI). 3+ years of experience reviewing and triaging data related security alerts, analyzing access and movement of sensitive information, documenting findings, and escalating incidents according to established procedures. 3+ years of collaborating with technical and nontechnical teams to resolve security issues and supporting Preferred Skills Certifications: Microsoft SC100, SC200, CEH, or an Associate level CISSP. Experience working with AI driven security tools, Cortex, particularly DSPM platforms designed to manage sensitive data used by AI systems Experience finetuning DLP policies, refining insider risk alerts, or supporting data governance programs Familiarity with Azure security, identity-based access controls, conditional access, and security automation or scripting Notes: Hybrid (3 days in office, 2 days remote). VIVA USA is an equal opportunity employer and is committed to maintaining a professional working environment that is free from discrimination and unlawful harassment. The Management, contractors, and staff of OpenKyber shall respect others without regard to race, sex, religion, age, color, creed, national or ethnic origin, physical, mental or sensory disability, marital status, sexual orientation, or status as a Vietnam-era, recently separated veteran, Active war time or campaign badge veteran, Armed forces service medal veteran, or disabled veteran. Please contact us at for any complaints, comments and suggestions. Contact Details : Account co-ordinator: Binodh Thankappan OpenKyber INC. 3601 Algonquin Road, Suite 425 Rolling Meadows, IL 60008 |
For applications and inquiries, contact:hirings@openkyber.com
Job Tags
For contractors, Work at office, Remote work