Mid-Level Data Protection/DLP Analyst

As the Data Protection / DLP Analyst, you will help protect sensitive client information while it is in use, in transit, and at rest.

You will support enterprise data-protection operations, strengthen policy enforcement, and help ensure sensitive information is discovered, monitored, and safeguarded appropriately across the environment.

In this role, you will:

• Operate DLP tools and associated processes to automatically protect sensitive client information across data in use, in transit, and at rest.
• Define, discover, and protect sensitive information regardless of where or how it is stored or used.
• Prevent exfiltration through network gateways and endpoints while supporting visibility into encrypted traffic.
• Provide automated policy enforcement to safeguard sensitive data and support privacy requirements.
• Support and validate discovery of sensitive information within repositories such as SharePoint, network drives, and databases using data-at-rest DLP capabilities.
• Implement technical measures that help protect sensitive information from inadvertent disclosure and exfiltration on endpoints, across the network, and within storage environments.
• Support the deployment of DLP agents on targeted endpoints that routinely handle sensitive data.
• Track endpoint DLP agent deployment for targeted devices and support enterprise reporting needs.
• Analyze DLP alerts and events, distinguish true policy violations from false positives, tune detection rules to reduce noise, and escalate confirmed incidents to the incident response team with complete context.
• Contribute to DLP policy enforcement documentation, sensitive-data discovery validation results, and ad hoc information security reporting.
• Bachelor's degree in a related field, or equivalent experience as allowed by company and contract policy.
• Three or more years of hands-on data protection or DLP operations experience.
• Experience with enterprise DLP platforms such as Microsoft Purview, Forcepoint, Broadcom/Symantec, Trellix, or similar tools.
• Knowledge of PII, PHI, and CUI handling requirements and data classification practices.
• Understanding of data protection across data at rest, in transit, and in use, including network and endpoint DLP.
• Familiarity with the Privacy Act of 1974 and PHI/HIPAA considerations in a federal environment.
• Strong analytical, organizational, and communication skills with the ability to work effectively across technical stakeholders.
• Ability to meet federal background investigation requirements.

• Active certification such as CompTIA Security+, CISSP, IAPP CIPP/G, or vendor DLP certifications.
• Experience with SharePoint and Microsoft 365 data discovery and sensitivity labeling.
• Familiarity with encryption and CASB technologies.
• Experience integrating DLP telemetry with SIEM platforms such as Splunk and ticketing systems such as ServiceNow.
• Prior support to federal civilian agency cybersecurity programs.

We're invested in the people who make our success possible.

As a K2United employee, you'll enjoy a comprehensive benefits package designed to support your professional and personal well-being, including:

• 401(k) with employer matching
• Low-cost medical coverage for employees and their families
• Paid time off
• Paid leave for jury duty, military service, voting, and other qualifying events
• Wellness stipend, including fitness reimbursement
• Tuition assistance
• Casual work environment
• Technical training and certification support
• Complimentary access to CareerSafe online training courses for employees and their immediate family

K2United is an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, protected veteran status, or any other characteristic protected by applicable law.