Security Analyst IV – DLP Monitoring & Response

CSAA Insurance Group is seeking an experienced Security Analyst IV to support enterprise Data Loss Prevention (DLP) operations. The role focuses on monitoring, investigating, and triaging DLP alerts, assessing risk, coordinating response activities, and collaborating across teams to protect sensitive information and improve data security controls.

Responsibilities:

• Monitor, investigate, and triage DLP and data protection alerts across multiple security platforms
• Analyze events to determine risk, business impact, and appropriate remediation actions
• Escalate high-risk events in accordance with established incident response procedures
• Document investigations, findings, and remediation recommendations
• Identify potential data exposure, unauthorized sharing, and data exfiltration risks
• Validate alerts and distinguish true positives from false positives
• Support risk-based prioritization of security events and incidents
• Ensure alignment with corporate security policies and regulatory requirements
• Partner with Cyber Defense, Security Engineering, IT, Cloud, Privacy, Legal, Compliance, and business teams
• Work with data owners and stakeholders to validate business context and support remediation efforts
• Communicate findings and recommendations to both technical and non-technical audiences
• Identify recurring trends, policy gaps, and tuning opportunities
• Support DLP policy optimization, detection improvements, and automation initiatives
• Contribute to operational playbooks, procedures, and knowledge-sharing efforts
• Assist in developing metrics, dashboards, and reporting for leadership

Requirements:

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field or equivalent practical experience (may be considered in place of a bachelor's degree)
• 7+ years of experience in cybersecurity, security operations, incident response, DLP, CASB, cloud security, or data protection
• Hands-on experience investigating and responding to security or DLP alerts in an enterprise environment
• Experience working with one or more DLP/CASB platforms such as Microsoft Purview, MDCA, Netskope, AWS Macie, or Trellix
• Familiarity with cloud collaboration platforms and data sharing technologies
• Understanding of DLP concepts, data classification, and information protection controls
• Knowledge of incident response processes and security event investigations
• Experience with cloud security technologies and SaaS applications
• Familiarity with SIEM tools, dashboards, and security reporting
• Working knowledge of regulatory and compliance requirements such as PCI, GDPR, CCPA, HIPAA, or similar frameworks.Years' of experience
• Travels as needed for role, including divisional / team meetings and other in-person meetings
• Please note we are hiring for this role remote anywhere in the United States with the following exceptions: Hawaii and Alaska
• CSAA does not provide visa sponsorship for this role. Applicants must have authorization to work indefinitely in the US. Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e., H-1B, TN, STEM OPT Training Plans, etc.)
• CISSP
• CISM
• Security+
• CEH
• Microsoft Security Certifications
• Netskope Certifications
• AWS Security Certifications