Sr DLP Security Operations Analyst

Overview:

Cox Automotive is searching for a Sr DLP Security Operations Analyst.

Cox Automotive is a leading provider of automotive products and services, offering a wide range of solutions to dealers, manufacturers, and consumers. With a focus on innovation and customer service, Cox Automotive helps clients navigate the ever-changing automotive industry landscape. From digital marketing and software solutions to vehicle remarketing and logistics, Cox Automotive is dedicated to driving the future of the automotive industry.

This is a 3 Month W2 contract assignment with the opportunity for contract extension or to transition to a permanent, full-time role based on performance and business needs.

Responsibilities:

Responsibilities of the Sr DLP Security Operations Analyst:

• Lead the expansion and continuous improvement of Data Loss Prevention (DLP) initiatives across the organization, including international operations, ensuring robust policy enforcement and alignment with regulatory requirements
• Monitor, investigate, and respond to potential data loss events from both internal and external sources, ensuring swift containment and remediation
• Administer, tune, and maintain DLP technologies for on-premise, cloud, SaaS, and endpoint environments to ensure robust policy enforcement
• Develop, update, and enforce DLP policies and operational playbooks to address evolving data protection risks and regulatory requirements
• Utilize threat intelligence to adapt DLP controls in response to new tactics, techniques, and procedures (TTPs) that target sensitive or regulated data
• Review and approve new system deployments to ensure integration with DLP monitoring and compliance requirements
• Document DLP incidents, investigations, and remediation steps to support regulatory audits and continuous process improvement
• Collaborate with IT and security teams to automate DLP alerts and responses for faster threat mitigation
• Provide off-hours support to address urgent DLP incidents and maintain 24/7 data protection coverage
• Monitor and review DLP alerts across email, web, endpoint, and cloud
• Identify and prioritize real incidents vs. false positives
• Investigate user activity and data movement related to alerts
• Determine if incidents are accidental, negligent, or malicious
• Escalate high-risk cases to Legal, HR, or Security leadership
• Take action to contain active threats (e.g., disable sharing, isolate devices)
• Document all findings, actions, and outcomes in the case tracking system
• Recommend user coaching or awareness training when needed
• Propose improvements to DLP rules to reduce noise and increase accuracy
• Track and report incident trends and metrics (volume, type, resolution time)
• Collaborate with IT, Legal, HR, and business units during investigations
• Support audits, compliance checks, and policy updates as needed
• Obtains information and stays up-to-date on the latest threats and security trends in a fast and efficient way to keep the enterprise environment protected
• Assists in the investigation and resolution of security issues

Minimum Qualifications:

Qualifications of the Sr DLP Security Operations Analyst:

• Bachelor's degree in Computer Science, Information Security, or a related field, or an equivalent combination of education and relevant industry experience
• Hands-on experience in Information Security operations, including Security Monitoring,

Incident Response and Network Security Fundamentals
- Practical experience with Data Loss Prevention

(DLP) tools and concepts, with exposure to one or more leading platforms such as Symantec, Microsoft Purview, Zscaler, Forcepoint, or Digital Guardian.
- Working knowledge of industry-standard security technologies, including:

- Firewalls, VPN, Intrusion Detection Systems (IDS)
- Endpoint Detection & Response (EDR)
- Antivirus (AV)
- Secure Web Gateway/Proxy
- Strong experience with SIEM event/log analysis and correlation
- Understanding of Data Loss Prevention (DLP) concepts, frameworks, and technologies
- Familiarity with data classification standards (e.g., PII, PCI, PHI, IP)
- Knowledge of common DLP platforms:

- Symantec DLP
- Microsoft Purview DLP
- Zscaler DLP
- Forcepoint, McAfee, Digital Guardian, etc.
- Basic understanding of network security, email security, and endpoint protection
- Knowledge of regulatory and compliance standards:

- HIPAA, GDPR, CCPA, SOX, PCI-DSS

Benefits:

• Comprehensive Benefits Package available based on eligibility
• Medical, Dental, Vision
• Short-Term Disability (STD)
• Long-Term Disability (LTD)
• Supplemental and Voluntary Life Insurance
• 401(K)
• Commuter Benefit Program

Requisition Disclaimer:

As a woman-owned firm, Atrium values diversity. We are an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, genetic information or any other characteristic protected by law. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

This job posting is for a temporary role as an employee of Atrium on assignment at Cox. The individual selected for this role will be offered the role as an employee of Atrium; compensation, medical benefits, fringe benefits and other terms and conditions of employment shall be presented by Atrium upon offer. The pay rate range provided is a reasonable estimate of the anticipated compensation range for this job at the time of posting. The actual pay rate will be based on a number of factors, including skills, competencies, experience, location and/or being pursued and other job-related factors permitted by law. In addition, this role will be eligible for overtime pay, in accordance with federal and state requirements

By applying for this position you agree to the Atrium Terms and Conditions. Agreeing to these terms, includes permission to use the email address and mobile phone number you provide during the application process or throughout the duration of your prospective or actual employees to notify you of job openings, profiles, articles, news, and other employment-related information, as well as to notify you of special promotions or additional products and services offered by us or our affiliates and partners (collectively, "Atrium Alerts"). Atrium Alerts may be sent by email, phone or text message. Your personal information will be safely stored in our database. Atrium does not sell your personal information to third parties. Text message and data rates may apply. To OPT OUT of text messaging or to modify your communication preferences for Atrium Alerts at any time, please contact us at

If you do not agree with the Atrium Terms and Conditions, you can still complete your application for this position by emailing your resume to our team at Please include the job title in the subject of your email.

NO C2C OR THIRD-PARTY VENDORS