Data Security Analyst

Paymentus•Dallas, TX

6d•Onsite

About The Position

Paymentus is seeking a Data Security Analyst to join its Cyber Security team, focusing on Data Loss Prevention (DLP). The role supports daily operation of the organization's DLP program by monitoring alerts, investigating incidents, maintaining policies, and helping protect sensitive data across cloud, endpoint, email, and SaaS environments. The position is suited to someone eager to grow their cybersecurity skills and solve technical problems as part of a collaborative security team. The analyst works with Security Operations and teams across Engineering, IT, Product, HR, Legal, and the business to investigate events, support secure handling of sensitive information, and improve data protection operations. The role also supports compliance initiatives and audits, DLP documentation and procedures, security awareness, and ongoing optimization of DLP technologies. This position has no supervisory responsibility. The position is full-time and operates on-site at the Richmond Hill office. Work is Monday through Friday during normal business hours, with occasional evening and weekend work as duties demand. The role routinely uses standard office equipment, including laptop computers, photocopiers, and smartphones.

Requirements

1–3 years of experience in Cybersecurity, Information Security, IT Operations, or a related technical role.
Basic understanding of Data Loss Prevention (DLP) concepts and data protection principles.
Familiarity with cloud and SaaS environments, such as Google Workspace, AWS, or Azure.
Experience working with security technologies such as email security, endpoint security, or similar tools.
Strong troubleshooting and analytical skills.
Excellent written and verbal communication skills.
Strong interest in cybersecurity and data protection.
Detail-oriented with strong organizational skills.
Excellent analytical and problem-solving abilities.
Eagerness to learn new technologies and security concepts.
Ability to manage multiple priorities in a fast-paced environment.
Strong communication and collaboration skills.
Self-motivated with a proactive approach to continuous learning.
An automation mindset and interest in improving operational efficiency.

Nice To Haves

Experience with DLP technologies such as Cyberhaven, Microsoft Purview, Proofpoint, Symantec, or similar solutions.
Basic scripting or automation experience with PowerShell, Python, Bash, or similar.
Familiarity with Microsoft 365 or Google Workspace administration.
Basic understanding of identity and access management concepts, such as Okta or Microsoft Entra ID.
Knowledge of compliance frameworks such as PCI-DSS, SOC 2, GDPR, or ISO 27001.
Security+, SC-900, AZ-900, or similar entry-level security certifications.

Responsibilities

Monitor and investigate DLP alerts and potential data security incidents.
Assist with tuning DLP policies to improve detection accuracy and reduce false positives.
Support protection of sensitive data across endpoints, email, cloud, and SaaS applications.
Document investigation findings and escalate complex incidents when necessary.
Maintain DLP documentation, playbooks, and operational procedures.
Track and report DLP metrics, trends, and recurring issues.
Assist users with DLP-related questions and policy guidance.
Work with Security Operations to investigate data security events.
Help identify root causes of DLP incidents and recommend improvements.
Assist with testing new DLP policies before production deployment.
Support troubleshooting of DLP tools and policy issues.
Participate in incident response activities involving data security events.
Assist with basic scripting and automation to improve reporting and operational efficiency.
Help integrate DLP alerts into existing security workflows.
Support ongoing maintenance and optimization of DLP technologies.
Support compliance initiatives, including PCI-DSS, SOC 2, GDPR, and other applicable regulations.
Assist with audit requests by gathering evidence and documentation.
Help maintain data protection standards, documentation, and operational procedures.
Follow established data handling and security best practices.
Work with Engineering, IT, Product, HR, Legal, and business teams to support secure handling of sensitive information.
Participate in security awareness initiatives related to data protection.
Stay current on emerging threats and best practices related to DLP and data protection.
Contribute to continuous improvement of the organization's data security program.