Data Security Analyst

Paymentus Group Inc•Dallas, TX

6d•$83,000 - $105,000•Onsite

About The Position

Paymentus is seeking a Data Security Analyst to join its Cyber Security team, focusing on Data Loss Prevention (DLP). The role supports the day-to-day operation of the organization's DLP program by monitoring alerts, investigating incidents, maintaining policies, and helping protect sensitive data across cloud, endpoint, email, and SaaS environments. The position is suited to someone eager to develop cybersecurity skills, solve technical problems, and work collaboratively with a security team. The analyst works with Security Operations and teams across Engineering, IT, Product, HR, Legal, and the business to investigate data security events, support secure handling of sensitive information, and improve the organization's data security program. The role also supports compliance initiatives, audit evidence gathering, security awareness, DLP tool maintenance, and basic automation. This is an on-site role at Paymentus's Richmond Hill office. It is full-time, Monday through Friday during normal business hours, with occasional evening and weekend work as duties require. The position has no supervisory responsibility.

Requirements

1–3 years of experience in Cybersecurity, Information Security, IT Operations, or a related technical role.
Basic understanding of Data Loss Prevention (DLP) concepts and data protection principles.
Familiarity with cloud and SaaS environments, such as Google Workspace, AWS, or Azure.
Experience working with security technologies such as email security, endpoint security, or similar tools.
Strong troubleshooting and analytical skills.
Excellent written and verbal communication skills.
Strong interest in cybersecurity and data protection.
Detail-oriented with strong organizational skills.
Excellent analytical and problem-solving abilities.
Eager to learn new technologies and security concepts.
Able to manage multiple priorities in a fast-paced environment.
Strong communication and collaboration skills.
Self-motivated with a proactive approach to continuous learning.
Demonstrates an automation mindset and seeks opportunities to improve operational efficiency.

Nice To Haves

Experience with DLP technologies such as Cyberhaven, Microsoft Purview, Proofpoint, Symantec, or similar solutions.
Basic scripting or automation experience with PowerShell, Python, Bash, or similar.
Familiarity with Microsoft 365 or Google Workspace administration.
Basic understanding of identity and access management concepts, such as Okta or Microsoft Entra ID.
Knowledge of compliance frameworks such as PCI-DSS, SOC 2, GDPR, or ISO 27001.
Security+, SC-900, AZ-900, or similar entry-level security certifications.

Responsibilities

Monitor and investigate DLP alerts and potential data security incidents.
Assist with tuning DLP policies to improve detection accuracy and reduce false positives.
Support the protection of sensitive data across endpoints, email, cloud, and SaaS applications.
Document investigation findings and escalate complex incidents when necessary.
Maintain DLP documentation, playbooks, and operational procedures.
Track and report DLP metrics, trends, and recurring issues.
Assist users with DLP-related questions and policy guidance.
Work with Security Operations to investigate data security events.
Help identify root causes of DLP incidents and recommend improvements.
Assist with testing new DLP policies before production deployment.
Support troubleshooting of DLP tools and policy issues.
Participate in incident response activities involving data security events.
Assist with basic scripting and automation to improve reporting and operational efficiency.
Help integrate DLP alerts into existing security workflows.
Support ongoing maintenance and optimization of DLP technologies.
Support compliance initiatives, including PCI-DSS, SOC 2, GDPR, and other applicable regulations.
Assist with audit requests by gathering evidence and documentation.
Help maintain data protection standards, documentation, and operational procedures.
Follow established data handling and security best practices.
Work with Engineering, IT, Product, HR, Legal, and business teams to support secure handling of sensitive information.
Participate in security awareness initiatives related to data protection.
Stay current on emerging threats and best practices related to DLP and data protection.
Contribute to continuous improvements in the organization's data security program.