DLP Security Analyst

DLP Security Analyst

Join to apply for the DLP Security Analyst role at Republic Services

POSITION SUMMARY: The Republic Services Cybersecurity Team is committed to secure and protect Republic Services’ information anywhere, on any device, and at all times. We are seeking the brightest and most enthusiastic cybersecurity professionals to partner with in protecting Republic Services data and building out a culture of security. Members of our team demonstrate relentlessness and resourcefulness as they pave the path forward constantly working to stay ahead of the latest threats.

We are looking for tenacious individuals to bring clarity to ambiguous situations by synthesizing information from multiple sources and merging it into a plan that will bring quantifiable results towards our goals.

The DLP Security Analyst will be primarily responsible for the maintenance and daily monitoring of enterprise Data Loss Prevention (DLP) solutions. The main duties of the person in this role will include proper care and administration of the DLP environments and monitoring and responding to alerts that generate from the tools. This person will interface closely with our Security Operations and Identity and Access Management teams.

This person will also work with our business partners across the entire organization for alert remediation.

• Manage DLP tools, configure, monitor and take action on generated alerts
• Collaborate directly with business partners in remediating alerts
• Work closely with our Security Operations and Identity and Access Management teams in responding to and remediating alerts
• Fine tune false positive alerts within DLP tools such as Netskope, Microsoft Security Tools and Varonis Dat Advantage
• Work with vendors to support DLP technologies (troubleshooting, upgrades, patching, etc.)
• Assist application owners with questions related to configuring native DLP features and capabilities
• Understand and follow the incident response process through event escalations
• Discover data on all new (incl. M&A) applications;
  Understand unique sensitivities. Establish operational remediation process.
• Communicate with data owners to align with the Data Protection Standard such as retention enforcement and security controls related to data-in-motion, data-at-rest, data-in-use.
• Maintain internal DLP website with up-to-date articles, training and communications related to DLP security, Q&A, protection how-to’s, etc.
• Plan employee engagement activities for awareness of proper security hygiene
• Act as an ambassador in communicating policies, purposes and goals of the cybersecurity team
• Develop and maintain productive working relationships with other teams across the company to facilitate development of cross-functional coordination and collaboration in protecting data

• Knowledge of best practices for DLP principles
• Experience with administration of shares/permissions in Windows DFS environment
• Experience with threat detection and alerting
• Experience with Active Directory, Netskope, Microsoft Security Tools with E3/E5 license and Varonis Data Security platform
• Active security certifications such as Varonis Administrator or other DLP certifications
• Ability to independently research and solve technical issues
• Proven effective verbal and written communication skills
• Demonstrated integrity in a professional environment
• Familiarity with cybersecurity tools, techniques, and concepts

• 1-2 Years of Data Loss Prevention (DLP) Technology support and alert handling

• Comprehensive medical benefits coverage, dental plans and vision coverage.
• Health care and dependent care spending accounts.
• Short- and long-term disability.
• Life insurance and accidental death & dismemberment insurance.
• Employee and Family Assistance Program (EAP).
• Employee discount programs.
• Retirement plan with a generous company match.
• Employee Stock Purchase Plan (ESPP).
• Paid Time Off (PTO)
• Benefits:

The statements used herein are intended to describe the general nature and level of the work being performed by an employee in this position, and are not intended to be construed as an exhaustive list of…