Mid-Level Data Protection/DLP Analyst

K2United is an organization that houses two distinct, national, customer-facing brands tied together by a shared purpose: setting the standard for an extraordinary workplace. Through our brands, K2Share and CareerSafe, we provide advisory services in cyber risk management and online education for workforce readiness.

Our four core values define how we show up every day:

• Respect Others - We lead with respect, building trust and connection.
• Internally Driven - We are relentlessly compelled to accomplish our objectives.
• Collaborative Innovation - We create by listening, sharing, and working together.
• Client Success - We hold our clients' mission as our own.

We believe in people who are accountable, curious, and motivated to make an impact that matters.

Our programs make a meaningful difference. CareerSafe supports more than two million users each year, while K2Share delivers cybersecurity and IT solutions that strengthen federal agencies. As part of our team, you'll help solve complex challenges in a mission-driven, small-business environment that values professional growth, collaboration, and work-life balance.

K2Share is seeking a Data Protection / DLP Analyst to support a federal health sector client. In this role, you will operate Data Loss Prevention tools and associated processes to help protect sensitive client information across enterprise systems. You will help prevent unauthorized disclosure and exfiltration of sensitive data, strengthen policy enforcement, and support a proactive data-protection program across the environment.

This position is remote first, with periodic on-site support in the Washington, DC metropolitan area as directed, and is contingent upon contract award.  

About You

You are a detail-oriented security professional who understands that protecting sensitive information requires both strong tooling and disciplined operational follow-through. You know how to identify, classify, and protect information such as PII, PHI, CUI, and intellectual property across a variety of systems and use cases.

You are comfortable working with enterprise DLP platforms and understand how data protection works in practice across endpoints, networks, and data repositories. You bring a strong sense of ownership to your work, communicate clearly with technical stakeholders, and are able to support both routine operations and targeted investigations with consistency and precision.

You thrive in environments where policy, technology, and operational execution come together. You are motivated by the opportunity to protect sensitive information in a mission-driven federal environment and to help improve visibility and control over how data is handled across the enterprise.

Your Impact

As the Data Protection / DLP Analyst, you will help protect sensitive client information while it is in use, in transit, and at rest. You will support enterprise data-protection operations, strengthen policy enforcement, and help ensure sensitive information is discovered, monitored, and safeguarded appropriately across the environment.

In this role, you will:

• Operate DLP tools and associated processes to automatically protect sensitive client information across data in use, in transit, and at rest.
• Define, discover, and protect sensitive information regardless of where or how it is stored or used.
• Prevent exfiltration through network gateways and endpoints while supporting visibility into encrypted traffic.
• Provide automated policy enforcement to safeguard sensitive data and support privacy requirements.
• Support and validate discovery of sensitive information within repositories such as SharePoint, network drives, and databases using data-at-rest DLP capabilities.
• Implement technical measures that help protect sensitive information from inadvertent disclosure and  exfiltration on endpoints, across the network, and within storage environments.
• Support the deployment of DLP agents on targeted endpoints  that routinely handle sensitive data.
• Track endpoint DLP agent  deployment for targeted devices and support enterprise reporting needs.
• Analyze DLP alerts and events, distinguish true policy violations from false positives, tune detection rules to reduce noise, and escalate confirmed incidents to the incident response team with complete context.  
• Contribute to DLP policy enforcement documentation, sensitive-data discovery validation results, and ad hoc information security reporting.

• Bachelor's degree in a related field, or equivalent experience as allowed by company and contract policy.
• Three or more years of hands-on data protection or DLP operations experience.
• Experience with enterprise DLP platforms such as Microsoft Purview, Forcepoint, Broadcom/Symantec, Trellix, or similar tools.
• Knowledge of PII, PHI, and CUI handling requirements and data classification practices.
• Understanding of data protection across data at rest, in transit, and in use, including network  and endpoint DLP.
• Familiarity with the Privacy Act of 1974 and PHI/HIPAA considerations in a federal environment.
• Strong analytical, organizational, and communication skills with the ability to work effectively across technical stakeholders.
• Ability to meet federal background investigation requirements.

Preferred Qualifications

• Active certification such as CompTIA Security+, CISSP, IAPP CIPP/G, or vendor DLP certifications.
• Experience with SharePoint and Microsoft 365 data discovery and sensitivity labeling.
• Familiarity with encryption and CASB technologies.
•  Experience integrating DLP telemetry with SIEM platforms such as Splunk and ticketing systems such as ServiceNow.  
• Prior support to federal civilian agency cybersecurity programs.

Benefits

We're invested in the people who make our success possible. As a K2United employee, you'll enjoy a comprehensive benefits package designed to support your professional and personal well-being, including:

• 401(k) with employer matching
• Low-cost medical coverage for employees and their families
• Paid time off
• Paid leave for jury duty, military service, voting, and other qualifying events
• Wellness stipend, including fitness reimbursement
• Tuition assistance
• Casual work environment
• Technical training and certification support
• Complimentary access to CareerSafe online training courses for employees and their immediate family

Equal Opportunity Employer

K2United is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, protected veteran status, or any other characteristic protected by applicable law.