Joining Cyberhaven offers a unique opportunity to revolutionize data protection through cutting-edge AI technology. Cyberhaven is dedicated to overcoming the challenges faced by traditional data security products, ensuring robust protection of critical data against insider threats in a rapidly evolving work environment. With a unique approach to data lineage, tracing data from its origin for better classification and protection, Cyberhaven combines the functionality of traditional data protection security tools into a single, more effective solution.

About the role

This is an ideal opportunity for a highly motivated individual to get in on the ground floor as we build out our Professional Services and Managed Services functions at Cyberhaven. The Data Protection Analyst holds a key position in providing continuous value for our customers and is responsible for advancing the mission of identifying potential insider threats and investigating endpoint forensic incidents. You will be responsible for performing technical analysis of data security incidents, finding and exposing risk in a customers environment as well as handling documentation and project management aspects of incident response. You will also perform analysis of events and incidents.

You will become an expert on Cyberhaven’s Data Detection and Response platform, understand how it interacts with customers’ technology endpoints, and understand how our customers are trying to reduce data loss threats across the organization. You will help our customers operationalize Data Detection and Response!

You should be comfortable speaking with security and customer operation teams. You must have technical depth, be “client obsessed”, and have proven experience with a SaaS-based data protection security product. Having the desire to take initiative, being obsessed with proving value for customers, and love working in a fast paced, high growth environment is key.

You will be reporting to the Head of Global Service within the Professional Services Organization.

What you’ll do

• Serve as a subject matter expert on data protection security issues, understand external DLP market trends, and incorporate these insights to illustrate realized value for our customers

• Analyze Cyberhaven’s Data Detection and Response platform event data to improve policies and incidents/alerts and bring focus to areas where data loss risk may exist

• Partner with clients to develop incident response workflows that map to their security objectives and policies

• Refine datasets and policies and manage them as customers’ data risk strategy matures and business needs evolve

• Identify trends and drive requirements aimed at improving and enhancing existing data detection and response policies

• Prepare and present formal summaries to technical and non-technical audiences

• Collaborate with Cyberhaven’s Product and Development team to develop and implement innovative strategies for monitoring and preventing data loss

• Eliminate noise and false-positive information from analytic results

• Provide forensic analysis on people, groups, and non sanctioned egress destinations as requested by clients

Who you are

• 3+ years’ experience in working with a data protection product, knowledge of endpoint protection best practices and incident mitigation workflows.

• 2+ years’ experience with Insider Threat Programs and Information Security.

• 4+ years’ experience providing advice and expert guidance on security issues affecting data protection and procedures exploitable by insiders (both accidental and malicious actions).

• Excellent problem-solving and analytical abilities with creative and logical thinking.

• Highly motivated, customer centric person, strong customer empathy and focus.

• Ability to work as part of a global team.

• Ability to create management level presentations and analysis on incident investigations.

• Excellent written and verbal communication skills.

What you should have:

• Familiarity with technologies that are adjacent to Cyberhaven in which we integrate, (SIEM/SOAR) are desired.

• Knowledge of security controls for the handling of sensitive data types.

• Experience with performing technical analysis as well as handling documentation and project management aspects of an incident response regarding data security issues.

• Understanding of macOS, Linux and Windows environments.

• Expertise with DLP, Insider Threat and CASB solutions

• Familiarity with cloud apps and services.

• Excellent communication and interpersonal skills required, with a passion for the cloud and related new technologies.

What you can count on

• Competitive Compensation

• Stock Options

• Flexible time off

• Growth Opportunities

Joining Cyberhaven means joining the team building Data Security for the Agentic Enterprise. Traditional tools fall short. Cyberhaven traces the full lifecycle of your data, adapting protection to changing context, so protection moves with the way people actually work, not against it. AI Changed Work. We Protect It.
Backed by $250M from leading investors like Khosla and Redpoint, our team includes leaders who built industry-defining technologies at CrowdStrike, Palo Alto Networks, Meta, Google, and more. This role lets you shape the future of data security, working alongside people driven to protect workflows, not just data, for customers who cannot afford to slow down to stay safe.

AI Tools Disclosure: As part of Cyberhaven's hiring process, we use recruiting tools that include AI-powered features to help with tasks like scheduling, note-taking, workflow automation, and other recruiting activities ("AI Tools"). The AI Tools may process information you provide during the application and interview process. When AI-assisted interview note taking is used, candidates are notified in advance and have the option to opt out of the AI-assisted interview note taking.

Cyberhaven is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.