Note: The job is a remote job and is open to candidates in USA. K2United is an organization that provides advisory services in cyber risk management and online education for workforce readiness. They are seeking a Data Protection / DLP Analyst to support a federal health sector client by operating Data Loss Prevention tools to protect sensitive client information across enterprise systems.
Responsibilities
- Operate DLP tools and associated processes to automatically protect sensitive client information across data in use, in transit, and at rest
- Define, discover, and protect sensitive information regardless of where or how it is stored or used
- Prevent exfiltration through network gateways and endpoints while supporting visibility into encrypted traffic
- Provide automated policy enforcement to safeguard sensitive data and support privacy requirements
- Support and validate discovery of sensitive information within repositories such as SharePoint, network drives, and databases using data-at-rest DLP capabilities
- Implement technical measures that help protect sensitive information from inadvertent disclosure and exfiltration on endpoints, across the network, and within storage environments
- Support the deployment of DLP agents on targeted endpoints that routinely handle sensitive data
- Track endpoint DLP agent deployment for targeted devices and support enterprise reporting needs
- Analyze DLP alerts and events, distinguish true policy violations from false positives, tune detection rules to reduce noise, and escalate confirmed incidents to the incident response team with complete context
- Contribute to DLP policy enforcement documentation, sensitive-data discovery validation results, and ad hoc information security reporting
Skills
- Bachelor's degree in a related field, or equivalent experience as allowed by company and contract policy
- Three or more years of hands-on data protection or DLP operations experience
- Experience with enterprise DLP platforms such as Microsoft Purview, Forcepoint, Broadcom/Symantec, Trellix, or similar tools
- Knowledge of PII, PHI, and CUI handling requirements and data classification practices
- Understanding of data protection across data at rest, in transit, and in use, including network and endpoint DLP
- Familiarity with the Privacy Act of 1974 and PHI/HIPAA considerations in a federal environment
- Strong analytical, organizational, and communication skills with the ability to work effectively across technical stakeholders
- Ability to meet federal background investigation requirements
- Active certification such as CompTIA Security+, CISSP, IAPP CIPP/G, or vendor DLP certifications
- Experience with SharePoint and Microsoft 365 data discovery and sensitivity labeling
- Familiarity with encryption and CASB technologies
- Experience integrating DLP telemetry with SIEM platforms such as Splunk and ticketing systems such as ServiceNow
- Prior support to federal civilian agency cybersecurity programs
Benefits
- 401(k) with employer matching
- Low-cost medical coverage for employees and their families
- Paid time off
- Paid leave for jury duty, military service, voting, and other qualifying events
- Wellness stipend, including fitness reimbursement
- Tuition assistance
- Casual work environment
- Technical training and certification support
- Complimentary access to CareerSafe online training courses for employees and their immediate family
Company Overview