level 1 DLP analyst

About the Role

Based in Kuala Lumpur within the Engineering department, the level 1 DLP analyst serves on the front line of data loss prevention operations. This full-time junior role monitors DLP alerts, identifies signals that require attention, documents findings, and helps ensure potential data-handling risks move through the correct review and escalation paths.

You will turn a constant stream of alerts into clear, actionable intelligence. The role calls for curiosity, sound judgment, careful reporting, and the discipline to follow established procedures without losing sight of the wider story behind an event. It is an opportunity to build practical experience in monitoring, incident triage, data protection, and cross-functional collaboration while contributing to the responsible handling of sensitive information.

Key Responsibilities

1. Monitor DLP alerts and operational queues to identify unusual data movement, potential policy violations, and events requiring further investigation.
2. Perform initial triage by reviewing available event details, validating alert context, and separating actionable cases from false positives or duplicate activity.
3. Document each review accurately, capturing relevant facts, actions taken, conclusions reached, and supporting evidence in the designated records.
4. Escalate confirmed or uncertain events through established channels, providing concise summaries that help senior analysts and stakeholders respond efficiently.
5. Prepare regular reports on alert volumes, case status, recurring patterns, response activity, and other operational observations requested by the team.
6. Track open cases and follow up on pending actions to support timely closure, complete records, and reliable operational visibility.
7. Apply approved DLP procedures consistently while handling sensitive information with discretion, care, and respect for access boundaries.
8. Collaborate with Engineering colleagues and relevant business contacts to gather context, clarify activity, and support the resolution of alerts.
9. Identify repetitive alert patterns, workflow gaps, or reporting inconsistencies and share practical observations with the appropriate team members.
10. Maintain awareness of updated procedures, data-handling expectations, and escalation criteria that affect day-to-day monitoring responsibilities.
11. Support operational reviews by organizing case information and presenting findings in a format that is clear, traceable, and ready for further analysis.

Required Qualifications

1. Demonstrated interest in data loss prevention, information protection, security monitoring, or related operational work.
2. Ability to monitor multiple alerts and work queues while maintaining accuracy, focus, and appropriate prioritization.
3. Strong written communication skills for producing clear case notes, incident summaries, status updates, and recurring reports.
4. Analytical thinking with the ability to compare facts, recognize patterns, question anomalies, and reach evidence-based initial conclusions.
5. Careful attention to detail when reviewing event information, recording activity, and following defined investigation steps.
6. Ability to handle sensitive or confidential information responsibly and exercise sound judgment when discussing case details.
7. Willingness to follow documented procedures, escalation routes, and data-handling requirements in a consistent manner.
8. Ability to collaborate professionally with technical and non-technical colleagues when requesting information or explaining observations.
9. Effective organization and time-management skills, including the ability to track open items and meet routine reporting expectations.
10. Readiness to learn unfamiliar concepts, accept constructive feedback, and develop practical capability in a junior operational role.

Nice to Have

1. General familiarity with DLP concepts, including sensitive-data detection, policy alerts, endpoint or network activity, and case escalation.
2. Exposure to monitoring platforms, case-management systems, ticketing tools, dashboards, or structured reporting workflows.
3. Awareness of common information-handling risks such as unintended sharing, unauthorized transfer, or improper storage of sensitive data.
4. Experience reviewing logs, alerts, operational records, or other structured information to identify meaningful patterns.
5. Understanding of basic incident-management principles, including triage, evidence capture, escalation, follow-up, and closure.
6. Comfort working in an environment where priorities may shift as new alerts, evidence, or business context emerge.

What We Offer

1. A full-time junior position in Kuala Lumpur with direct exposure to practical DLP monitoring, reporting, triage, and escalation activities.
2. A role within Engineering where careful analysis and precise documentation contribute to stronger data-protection operations.
3. Opportunities to build knowledge through real alert reviews, structured procedures, team collaboration, and feedback from experienced colleagues.
4. A clear operational scope that allows you to strengthen investigative thinking while developing confidence in case handling and communication.
5. A collaborative setting where thoughtful questions, useful observations, and continuous improvement are valued as part of everyday work.
6. Meaningful responsibility on the first line of review, where disciplined monitoring helps transform scattered signals into informed action.