SOC Analyst

LinkGroup is seeking a cybersecurity professional specialized in protecting sensitive business information and reducing data leakage risks.

• Minimum 4 years of experience in Security Operations, Cybersecurity Operations, SOC, or data protection roles.
• Experience investigating cybersecurity alerts and incidents.
• Good understanding of Data Loss Prevention concepts and information protection controls.
• Knowledge of data classification, information labeling, and data protection principles.
• Understanding of incident management and risk assessment processes.
• Familiarity with GDPR, privacy requirements, and Insider Risk Management.
• Ability to work with both technical and business stakeholders.
• Strong analytical and investigative skills.
• Good documentation and organizational skills.
• Ability to manage multiple cases and priorities in a dynamic environment.
• Hands-on experience with DLP solutions such as Microsoft Purview DLP and Proofpoint DLP.
• Knowledge of data loss prevention, data classification and labeling, insider risk management, security monitoring, incident response, and privacy regulations.
• A degree in Cybersecurity, Information Security, Computer Science, or a related field is an advantage.

• Investigate alerts related to unauthorized or suspicious handling of sensitive information.
• Analyze data transfers across email, endpoints, cloud applications, collaboration platforms, and removable media.
• Assess incidents based on severity, scope, business impact, and potential security or compliance risk.
• Verify suspected policy violations and identify false positives.
• Escalate confirmed security incidents and support remediation activities.
• Document investigation findings, root causes, decisions, and corrective actions.
• Review business requests for exceptions from data protection controls.
• Assess business justification and associated security and compliance risks.
• Coordinate exception approvals with security, privacy, compliance, and business stakeholders.
• Ensure approved exceptions are documented, time-limited, monitored, and periodically reviewed.
• Recommend compensating controls where exceptions introduce additional risk.
• Support configuration, maintenance, and improvement of Data Loss Prevention (DLP) policies.
• Identify opportunities to reduce false positives and improve detection effectiveness.
• Support audits by providing evidence related to incidents, exceptions, and implemented controls.
• Contribute to security awareness and continuous improvement initiatives related to information protection.