SOC Analyst

Quick Facts

• Role: SOC Analyst / Information Protection Analyst

Description

You will investigate cybersecurity events related to data movement and handling, assess potential policy violations, manage time-limited business exceptions, and help improve Data Loss Prevention (DLP) controls. The role includes analyzing data transfers across email, endpoints, cloud applications, collaboration platforms, and removable media, and coordinating with security, compliance, data protection, application, and business teams. You will document investigation findings, root causes, decisions, and corrective actions.

Responsibilities

• Investigate alerts related to potentially unauthorized or suspicious handling of sensitive information
• Analyze data transfers across email, endpoints, cloud applications, collaboration platforms, and removable media
• Assess incidents by severity, scope, business impact, and potential security/compliance risk
• Verify suspected policy violations and identify false positives
• Escalate confirmed security incidents and support remediation
• Review business requests requiring exceptions from data protection controls
• Coordinate exception approvals with security, privacy, compliance, and business stakeholders
• Ensure exceptions are documented, time-limited, monitored, and periodically reviewed
• Recommend compensating controls when exceptions increase risk
• Support configuration, maintenance, and continuous improvement of DLP policies
• Identify opportunities to reduce false positives and improve detection effectiveness
• Provide evidence for audits related to incidents, exceptions, and implemented controls
• Contribute to security awareness and continuous improvement initiatives

Requirements

• 4+ years of experience in Security Operations, Cybersecurity Operations, SOC, or data protection
• Experience investigating cybersecurity alerts and incidents
• Understanding of DLP concepts and information protection controls
• Knowledge of data classification, information labeling, and data protection principles
• Understanding of incident management and risk assessment processes
• Familiarity with GDPR, privacy requirements, and Insider Risk Management
• Ability to work with technical and business stakeholders
• Strong analytical/investigative skills and good documentation/organizational skills
• Ability to manage multiple cases and priorities in a dynamic environment

Benefits

A degree in a related field (Cybersecurity, Information Security, Computer Science, or similar) is an advantage.