[Remote] DLP Security Analyst
Note: The job is a remote job and is open to candidates in USA. Fidelity National Financial, Inc. is a leading provider of title insurance and transaction services to the real estate and mortgage industries. They are seeking a DLP Security Analyst to join their Information Security Office’s Defend Team, responsible for safeguarding sensitive data across various platforms and improving controls to reduce data exfiltration risk.
Responsibilities
• Monitor DLP alerts across channels (endpoint, network/email, cloud/SaaS) and prioritize, triage, and investigate events
• Perform evidence collection, and root cause analysis; escalate true positives to IR/SOC as needed
• Document incident timelines and outcomes; maintain high-quality case notes and playbooks
• Reduce false positives by accurately marking events during triage for reporting to the Engineering Team
• Operate in DLP platforms (e.g., Proofpoint, Zscaler)
• Track and report KPIs (e.g., alert volumes, false-positive rate, mean time to triage/contain, coverage, repeat offenders)
• Identify emerging patterns (exfil paths, channels, departments) and propose control or process improvements
• Review the DLP queue, triage top-priority alerts, and conduct investigations
• Meet with Legal/Privacy to align on policy thresholds; brief IR/SOC on new exfil patterns
• Generate weekly metrics; propose an improvement plan (e.g., labeling adoption or coaching campaigns)
• Participate in post-incident reviews and update playbooks
Skills
• Bachelor's degree or the equivalent combination of education, training, and work experience
• Requires 1 – 3+ years in security operations, IR/SOC, or DLP-focused roles
• Hands-on experience with one or more DLP platforms (e.g., Microsoft Purview DLP/Endpoint DLP, Symantec/Broadcom, Zscaler, Proofpoint)
• Some Working knowledge of data classification, encryption, endpoint controls, email security, CASB, and cloud security concepts
• Understanding of regulatory requirements (e.g., PCI, HIPAA, SOX, GLBA) and privacy principles
• Excellent analytical, documentation, communication, and complex thinking skills
• Experience partnering with Legal, Privacy, Compliance, and HR teams on data protection initiatives and investigations
• Scripting or automation experience (PowerShell, Python, or similar) to support DLP reporting, alerting, or operational efficiencies
• Relevant security certifications preferred (such as CISSP, CISM, GIAC, or Microsoft Security certifications)
Benefits
• Optional health and welfare insurance (medical/dental/vision/life/disability)
• Paid holidays
• Vacation
• Sick time off
• Matching 401(k) plan
• Matching employee stock purchase plan
Company Overview
• Fidelity National Financial is a provider of title insurance, mortgage services and diversified services. It was founded in 1847, and is headquartered in Jacksonville, Florida, USA, with a workforce of 10001+ employees. Its website is http://fnf.com.
Company H1B Sponsorship
• Fidelity National Financial has a track record of offering H1B sponsorships, with 1 in 2025, 1 in 2024, 4 in 2023, 2 in 2022, 3 in 2021, 2 in 2020. Please note that this does not guarantee sponsorship for this specific role.
Apply To This Job
Responsibilities
• Monitor DLP alerts across channels (endpoint, network/email, cloud/SaaS) and prioritize, triage, and investigate events
• Perform evidence collection, and root cause analysis; escalate true positives to IR/SOC as needed
• Document incident timelines and outcomes; maintain high-quality case notes and playbooks
• Reduce false positives by accurately marking events during triage for reporting to the Engineering Team
• Operate in DLP platforms (e.g., Proofpoint, Zscaler)
• Track and report KPIs (e.g., alert volumes, false-positive rate, mean time to triage/contain, coverage, repeat offenders)
• Identify emerging patterns (exfil paths, channels, departments) and propose control or process improvements
• Review the DLP queue, triage top-priority alerts, and conduct investigations
• Meet with Legal/Privacy to align on policy thresholds; brief IR/SOC on new exfil patterns
• Generate weekly metrics; propose an improvement plan (e.g., labeling adoption or coaching campaigns)
• Participate in post-incident reviews and update playbooks
Skills
• Bachelor's degree or the equivalent combination of education, training, and work experience
• Requires 1 – 3+ years in security operations, IR/SOC, or DLP-focused roles
• Hands-on experience with one or more DLP platforms (e.g., Microsoft Purview DLP/Endpoint DLP, Symantec/Broadcom, Zscaler, Proofpoint)
• Some Working knowledge of data classification, encryption, endpoint controls, email security, CASB, and cloud security concepts
• Understanding of regulatory requirements (e.g., PCI, HIPAA, SOX, GLBA) and privacy principles
• Excellent analytical, documentation, communication, and complex thinking skills
• Experience partnering with Legal, Privacy, Compliance, and HR teams on data protection initiatives and investigations
• Scripting or automation experience (PowerShell, Python, or similar) to support DLP reporting, alerting, or operational efficiencies
• Relevant security certifications preferred (such as CISSP, CISM, GIAC, or Microsoft Security certifications)
Benefits
• Optional health and welfare insurance (medical/dental/vision/life/disability)
• Paid holidays
• Vacation
• Sick time off
• Matching 401(k) plan
• Matching employee stock purchase plan
Company Overview
• Fidelity National Financial is a provider of title insurance, mortgage services and diversified services. It was founded in 1847, and is headquartered in Jacksonville, Florida, USA, with a workforce of 10001+ employees. Its website is http://fnf.com.
Company H1B Sponsorship
• Fidelity National Financial has a track record of offering H1B sponsorships, with 1 in 2025, 1 in 2024, 4 in 2023, 2 in 2022, 3 in 2021, 2 in 2020. Please note that this does not guarantee sponsorship for this specific role.
Apply To This Job