Skip to content

SecOps & IR

Senior Data Protection Analyst

Cyberhaven logoCyberhaven$150,000–$165,000/yrRemote in United StatesFull-timePosted 1mo ago
Apply on Cyberhaven (shows the role here)Cyberhaven as an employer: salaries and roles

At its midpoint, $158k/yr, this role pays less than the $175k/yr midpoint for Security Operations & Incident Response openings today (usual band $140k–$278k/yr).

The full posting

About the role

This is an ideal opportunity for a highly motivated individual to get in on the ground floor as we build out our Professional Services and Managed Services functions at Cyberhaven. The Senior Data Protection Analyst holds a key position in providing continuous value for our customers and is responsible for advancing the mission of identifying potential insider threats and investigating endpoint forensic incidents. You will be responsible for performing technical analysis of data security incidents, finding and exposing risk in a customers environment as well as handling documentation and project management aspects of incident response. You will also perform analysis of events and incidents.

What you’ll do

  • Provide insight into DLP analytics and related issues.
  • Analyze Cyberhaven’s Data Detection and Response (DDR) platform event data to improve policies and incidents/alerts and bring focus to areas where data loss risk may exist.
  • Refine datasets and policies and manage them as customers’ data risk strategy matures and business needs evolve.
  • Prepare and present summaries and reports to internal team members.
  • Eliminate noise and false-positive information from analytic results to enhance detection accuracy.
  • Conduct forensic analysis on people, groups, and non sanctioned egress destinations as requested.

Who you are

  • 5+ years with data protection or adjacent security tools (EDR, SIEM, SOAR) and 2+ years in Insider Threat/InfoSec.
  • Strong grasp of endpoint protection best practices and incident mitigation workflows.
  • Experience with DLP, Insider Threat, CASB and controls for handling sensitive data.
  • Comfortable across macOS, Linux, Windows and cloud platforms (AWS, GCP, Azure).
  • Data & automation: SQL for analysis; build/maintain dashboards; edit XML-based DLP rules; script and use APIs.
  • Excellent problem-solving and communication skills; collaborative on a global team; customer-centric with a passion for cloud security and emerging tech.

Joining Cyberhaven means joining the team building Data Security for the Agentic Enterprise. Traditional tools fall short. Cyberhaven traces the full lifecycle of your data, adapting protection to changing context, so protection moves with the way people actually work, not against it. AI Changed Work. We Protect It. Backed by $250M from leading investors like Khosla and Redpoint, our team includes leaders who built industry-defining technologies at CrowdStrike, Palo Alto Networks, Meta, Google, and more. This role lets you shape the future of data security, working alongside people driven to protect workflows, not just data, for customers who cannot afford to slow down to stay safe.

AI Tools Disclosure: As part of Cyberhaven's hiring process, we use recruiting tools that include AI-powered features to help with tasks like scheduling, note-taking, workflow automation, and other recruiting activities ("AI Tools"). The AI Tools may process information you provide during the application and interview process. When AI-assisted interview note taking is used, candidates are notified in advance and have the option to opt out of the AI-assisted interview note taking.

Cyberhaven is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Where you can be based

This position is 100% remote and open to applicants based in United States.

Text as Cyberhaven published it; last compared with the original on 13 Nov 2026.

Apply on Cyberhaven (shows the role here)

The application

Your details, CV and LinkedIn, then 4 questions.

Keep these to handCVLinkedIn
  1. 1.
    Do you live in the listed location for this position?Yes or no
  2. 2.
    Are you legally authorized to work in the United States without requiring sponsorship now or in the future?Yes or no · optional
  3. 3.
    Do you have 5+ years of hands-on experience with DLP, Insider Threat, or related security technologies?Yes or no
  4. 4.
    Do you have hands-on experience with SQL and at least one scripting/API technology (Python, PowerShell, Bash, or REST APIs)?Yes or no

Taken from Cyberhaven's application form as it stood on 13 Nov 2026.

The employer: Cyberhaven

Cyberhaven tracks how sensitive data moves through an organization to stop leaks; its open roles build AI security features into the product.

Pay and benefits: Bangalore or remote within the EU.

Full postings from Cyberhaven All Cyberhaven openings on the board Cyberhaven employer profile

Other security roles worth a look

Let security teams come to you

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Cyberhaven posts a security role

We read Cyberhaven's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.