Security Specialist (Senior to Staff) – Data Loss Prevention (DLP)

American Electric Power•Columbus, OH

1d•$98,993 - $128,688•Onsite

About The Position

Play a key role in strengthening the Insider Threat Program Team as a Data Loss Prevention (DLP) Analyst. This role combines real-time security monitoring, investigative work, and proactive threat hunting to prevent data loss incidents.

Requirements

Ability to obtain and maintain a U.S. government security clearance.
Excellent written and verbal communication skills, with strong analytical and critical-thinking ability.
Ability to investigate and handle sensitive and confidential information.
Expertise and knowledge of enterprise DLP tools and data protection controls across email, endpoint, cloud, and web environments.
Demonstrable ability to evaluate, implement, and improve DLP controls across diverse technology environments and business processes.
2 or more years of Information Technology related experience; OR 1 or more years of security related experience, which may include military/government work experience in addition to any experience identified above. (For Security Spec Sr - SG7)
4 or more years of Information Technology related experience; OR 2 or more years of security related experience, which may include military/government work experience in addition to any experience identified above. (For Security Spec Prin - SG8)
7 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above. (For Security Spec Lead - SG9)
10 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above. (For Security Spec Staff - SG10)

Nice To Haves

Bachelor's degree in cybersecurity, information security, computer science, or related field
Experience in cybersecurity, insider threat, security operations, digital forensics, data loss prevention, investigations, fraud detection, or intelligence analysis
Prior Investigations experience
Experience monitoring and investigating anomalous user activity and policy violations
Experience identifying data loss indicators through analytics and anomaly detection methodologies.
Understanding of security monitoring tools, SIEM platforms, and endpoint detection solutions
Ability to create and curate queries to detect and analyze data for potential data exfiltration activity
Experience working in cross-functional environments involving HR, Legal, Compliance, Privacy, and Security teams
Experience with case management and evidence handling
Experience with data classification, information protection, data loss prevention (DLP), and sensitive data monitoring technologies.
Familiarity with electric utility operations, industrial control systems (ICS/SCADA), or critical infrastructure protection frameworks (e.g., NERC CIP).
Ability to Use AI in threat detection and analysis
Knowledge of application on defense mechanisms for AI use
Microsoft Certified (SC-900, SC-400, SC-200)
Amazon Certified (Cloud Practitioner, Associate Architect)
CompTIA (Security+, Network+, CYSA+)
ISC2 (Certified in Cyber Security)
CERT Insider Threat Program Manager (ITPM)
GIAC (GCFE, GCFA, Others)
Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 3 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment). (For Security Spec Sr - SG7)
Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment). (For Security Spec Prin - SG8)
Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical). (For Security Spec Lead - SG9)
Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical). (For Security Spec Staff - SG10)

Responsibilities

Monitor and triage security alerts across multiple DLP platforms, determining which events require deeper investigation
Review daily alerts for data loss of personally identifiable information (PII), business-critical data, and confidential information across various sources such as email, cloud, and endpoint systems
Coordinate all DLP investigation activities, collaborating with internal stakeholders
Document findings thoroughly and maintain detailed case records
Design and tune data exfiltration detection use cases, improving alert accuracy and reducing false positives while ensuring effective protection of sensitive data.
Drive continuous improvement initiatives for the DLP program and monitoring across the enterprise
Stay current on threat actor tactics, techniques, and procedures (TTPs)
Track program metrics and align improvements to strategic roadmap goals
Participate in internal security improvement meetings and industry working groups
Leverage team resources effectively and communicate workload priorities to leadership