Cybersecurity Analyst

Kearney & Company • Alexandria, VA

13d • Onsite

About The Position

Kearney & Company Cybersecurity Analyst will play a key role in safeguarding the organization’s data by designing, implementing, and maintaining information protection and data loss prevention (DLP) controls across the Microsoft environment. This role focuses on proactively identifying risks, enforcing security policies, and ensuring sensitive information is appropriately governed and protected.

Requirements

• Bachelor’s degree from an accredited university or equivalent professional experience from a relevant field.
• Minimum 2 years experience managing and supporting Microsoft 365 security features, especially Microsoft Purview Information Protection and DLP.
• Strong understanding of data classification frameworks, regulatory requirements, and information governance concepts.
• Familiarity with Azure Active Directory, Conditional Access, and identity‑driven security models.
• Ability to interpret security alerts and logs, conduct incident analysis, and document findings.
• Excellent communication skills with the ability to translate technical controls into business‑friendly concepts.
• Ability to obtain and maintain an U.S. security clearance (requires U.S. citizenship)

Nice To Haves

• Certifications such as SC‑400, SC‑200, or related cybersecurity credentials are a plus.

Responsibilities

• Develop, maintain, and optimize information protection and DLP policies using Microsoft Purview, including sensitivity labels, data classification, and endpoint DLP.
• Monitor and analyze security alerts related to information leakage, unauthorized data access, and policy violations across Microsoft 365, Azure, and connected services.
• Conduct risk assessments to identify gaps in data protection controls and recommend corrective actions.
• Partner with IT, compliance, and business stakeholders to operationalize data protection policies and ensure alignment with regulatory and internal requirements.
• Manage and tune DLP rules to minimize false positives while improving detection accuracy.
• Support investigations into data security incidents, ensuring thorough analysis, documentation, and remediation.
• Oversee lifecycle management of sensitive data, including retention, governance, and secure disposal.
• Create and deliver training materials to raise security awareness related to data handling and protection.
• Maintain expertise in Microsoft information protection tools, emerging threats, and best practices to continuously strengthen the organization’s security posture.

Benefits

• Medical, Dental, Vision, Life, AD&D, and Disability Insurance
• 401(k) Retirement Plan and 529 Education Savings Plan
• Flexible Spending & Health Savings Account
• Accident, Critical Illness, Hospital Indemnity Insurances
• Legal Insurance and Pet Insurance
• Employee Assistance Program, fitness and wellness benefits, and other firm benefits.
• Paid holidays, vacation, and sick time

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level