Security Specialist (Senior to Staff) - Data Loss Prevention (DLP)

Data Loss Prevention (DLP) AnalystPlay a key role in strengthening the Insider Threat Program Team as a Data Loss Prevention (DLP) Analyst. This role combines real-time security monitoring, investigative work, and proactive threat hunting to prevent data loss incidents.Essential Job Functions and TasksMonitor and triage security alerts across multiple DLP platforms, determining which events require deeper investigationReview daily alerts for data loss of personally identifiable information (PII), business-critical data, and confidential information across various sources such as email, cloud, and endpoint systemsCoordinate all DLP investigation activities, collaborating with internal stakeholdersDocument findings thoroughly and maintain detailed case recordsDesign and tune data exfiltration detection use cases, improving alert accuracy and reducing false positives while ensuring effective protection of sensitive data.Drive continuous improvement initiatives for the DLP program and monitoring across the enterpriseStay current on threat actor tactics, techniques, and procedures (TTPs)Track program metrics and align improvements to strategic roadmap goalsParticipate in internal security improvement meetings and industry working groupsLeverage team resources effectively and communicate workload priorities to leadershipRequired Qualifications and SkillsAbility to obtain and maintain a U.S. government security clearance.Excellent written and verbal communication skills, with strong analytical and critical-thinking ability.Ability to investigate and handle sensitive and confidential information.Expertise and knowledge of enterprise DLP tools and data protection controls across email, endpoint, cloud, and web environments.Demonstrable ability to evaluate, implement, and improve DLP controls across diverse technology environments and business processes.Preferred QualificationsBachelor's degree in cybersecurity, information security, computer science, or related fieldExperience in cybersecurity, insider threat, security operations, digital forensics, data loss prevention, investigations, fraud detection, or intelligence analysisPrior Investigations experienceExperience monitoring and investigating anomalous user activity and policy violationsExperience identifying data loss indicators through analytics and anomaly detection methodologies.Understanding of security monitoring tools, SIEM platforms, and endpoint detection solutionsAbility to create and curate queries to detect and analyze data for potential data exfiltration activityExperience working in cross-functional environments involving HR, Legal, Compliance, Privacy, and Security teamsExperience with case management and evidence handlingExperience with data classification, information protection, data loss prevention (DLP), and sensitive data monitoring technologies.Familiarity with electric utility operations, industrial control systems (ICS/SCADA), or critical infrastructure protection frameworks (e.g., NERC CIP).Ability to Use AI in threat detection and analysisKnowledge of application on defense mechanisms for AI usePreferred Certifications and CoursesMicrosoft Certified (SC-900, SC-400, SC-200)Amazon Certified (Cloud Practitioner, Associate Architect)CompTIA (Security+, Network+, CYSA+)ISC2 (Certified in Cyber Security)CERT Insider Threat Program Manager (ITPM)GIAC (GCFE, GCFA, Others)Compensation DataCompensation Grade: SP20-008Compensation Range: $98,993.00 - $128,688.00The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time.It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. American Electric Power