Senior Analyst - Data Protection (Remote)

Join United Airlines

Achieving our goals starts with supporting yours. Grow your career, access top-tier health and wellness benefits, build lasting connections with your team and our customers, and travel the world using our extensive route network.

Come join us to create what's next. Let's define tomorrow, together.

Description

Connecting People. Uniting the World. There's never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world — with millions of customers and tens of thousands of employees — we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly.

We're on a path to becoming the best airline in aviation history. Join our Cybersecurity and Digital Risk (CDR) team to help lead the industry in cyber safety, security and resilience. United's CDR team plays a critical role in protecting our operations by enabling secure and resilient systems, managing threats and vulnerabilities, and ensuring swift response and recovery. Our mission is to seamlessly embed cybersecurity and digital risk management into every aspect of our business. We help drive progress and growth through trusted digital solutions, safeguarding assets and empowering our team, all while promoting a cyber-safe and secure environment that supports resilient airline operations.

United offers a competitive benefits package aimed at keeping you happy, healthy, and well-traveled. From employee-run "Business Resource Group" communities to world-class benefits like parental leave, 401(k), and privileges like space-available travel, United is truly a one-of-a-kind place to work. Are you ready to travel the world and help us keep our airline cyber safe? Apply today!

Job Overview and Responsibilities

The Senior Analyst, Data Protection, is responsible for advancing enterprise data protection capabilities through effective design and implementation of controls that reduce data exposure risk. This role focuses on protecting sensitive data across core workflows, including collaboration platforms, endpoints, and emerging technologies such as AI. The position emphasizes measurable control effectiveness, improved data visibility, and alignment of detection and prevention capabilities. This role partners across Cybersecurity, Legal, HR, and Technology to ensure data protection strategies are practical, scalable, and aligned to business risk.

• Data Protection Control Design & Implementation:
  • Design and deploy data protection controls across key platforms (M365, endpoints, cloud) to prevent unauthorized data exposure. Focus on effectiveness, usability, and alignment to business workflows.
• Data Visibility & Classification Enablement:
  • Drive improvements in data classification coverage and visibility using automated and semantic approaches. Ensure sensitive data is accurately identified and protected at scale
• AI & Emerging Technology Data Controls:
  • Define and implement controls to govern the use of AI and emerging technologies, ensuring protection of sensitive data in prompts, outputs, and integrations.
• Risk Assessment & Exposure Reduction:
  • Assess data exposure risks across enterprise environments and prioritize remediation actions that reduce real-world risk, beyond traditional egress-only models.
• Detection & Prevention Alignment:
  • Partner with Insider Threat and Cyber teams to ensure alignment between detection signals and preventative controls, improving overall effectiveness of risk mitigation.
• Governance & Cross-Functional Alignment:
  • Partner with Legal, HR, and business teams to ensure controls align with policy, regulatory requirements, and operational needs.

Qualifications

What's needed to succeed (Minimum Qualifications):

• Bachelor's degree required (Cybersecurity, Information Technology, Computer Science related majors preferred)
• 3+ years in STEM-related field
• Strong understanding of data protection principles, such as data classification, data lifecycle, and data exposure risks
• Experience designing and implementing data protection controls (i.e., DLP, endpoint controls, cloud data protection)
• Ability to assess and reduce data exposure across modern environments (M365, endpoints, cloud collaboration platforms)
• Familiarity with data classification approaches, including automated or semantic-based methods
• Understanding of data movement patterns and exfiltration techniques across enterprise environments
• Ability to evaluate control effectiveness and identify gaps based on real-world usage and risk scenarios
• Experience working with cross-functional partners (Legal, HR, Technology) to align controls with business needs and policy requirements
• Strong analytical and problem-solving skills with ability to translate risk into practical, scalable controls
• Effective communication skills to clearly articulate risks, control gaps, and recommendations to both technical and non-technical stakeholders
• Must be legally authorized to work in the United States for any employer without sponsorship
• Successful completion of interview required to meet job qualification
• Reliable, punctual attendance is an essential function of the position

What will help you propel from the pack (Preferred Qualifications):

• Master's degree
• Relevant certifications like CISSP, CISA, CIPP, CIPT, CISM
• Hands-on experience with DLP platforms, data classification tools, or data security posture solutions
• Familiarity with Microsoft Purview / M365 data protection capabilities
• Experience implementing or supporting controls related to AI / Generative AI usage (i.e., data exposure in prompts, output handling, usage governance)
• Knowledge of endpoint data protection and monitoring technologies
• Experience tracking or reporting on data protection KPIs (i.e., data visibility, classification coverage, protected data)
• Understanding of how data protection and insider threat detection align to reduce overall risk