Data Loss Prevention (DLP) Analyst
Nightfall AI · Remote · Palo Alto ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote role
- 3-5 years security exp
- DLP & Insider Threat focus
- Customer-facing technical role
- Python/PowerShell scripting
As a DLP Analyst at Nightfall, you will serve as a technical expert helping security teams detect and prevent data exfiltration. You will work directly with customers to monitor data movement, investigate alerts, and optimize detection policies across their organizations.
The role combines forensic investigation with strategic advisory, requiring you to distinguish between genuine threats and legitimate business activity. You will collaborate with internal engineering and success teams to ensure the platform delivers maximum value while maintaining employee productivity.
What you'll do
- Monitor and triage DLP alerts across endpoints, browsers, and SaaS apps
- Investigate data loss incidents using forensic techniques and behavioral context
- Configure and tune DLP policies to reduce false positives and improve accuracy
- Advise customers on insider threat mitigation and data protection best practices
- Administer the DLP solution including agent deployment and integration setup
- Produce executive reports with metrics on detection accuracy and risk assessment
- Collaborate with engineering to report bugs and suggest product improvements
What you'll need
- 3-5 years in information security with 2+ years in DLP or data protection
- Hands-on experience with enterprise DLP tools like Forcepoint or Microsoft Purview
- Strong knowledge of GDPR, HIPAA, PCI-DSS, and SOX compliance frameworks
- Proficiency in incident response processes and forensic investigation techniques
- Experience with SIEM platforms, log analysis, or UEBA tools
- Understanding of endpoint security on macOS, Windows, and browser platforms
- Basic scripting skills in Python, PowerShell, or Bash for automation
Nice to have
- Prior experience with Nightfall, Cyberhaven, or similar insider risk platforms
- Background in SOC operations, threat hunting, or blue team activities
- Knowledge of machine learning-based detection systems and API security
- Contributions to security community via blogs, speaking, or open source
Stack
- Nightfall
- Forcepoint
- Symantec
- McAfee
- Digital Guardian
- Microsoft Purview
- Splunk
- ELK
- Tines
- Python
- PowerShell
- Bash
How you'll work
- Fully remote position
- Global talent pool accepted