Remote Risk Data Analyst Jobs
Remote Risk Data Analyst jobs are open across finance, insurance, fintech, and healthcare at companies building distributed risk and analytics teams, from entry-level analysts supporting credit or operational risk functions to senior analysts leading model validation and reporting. Employers hiring remotely right now include Block, Surgery Partners, and Peraton. Find a role that fits below and apply directly.
Find Remote Risk Data Analyst JobsOverview
Showing 5 of 13+ Remote Risk Data Analyst jobs
About Peraton
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we’re keeping people around the world safe and secure.
About The Role
Peraton is seeking an Insider Risk & Data Protection Engineer to join the Insider Risk and Data Protection (IR/DLP) Team within Corporate Security Compliance & Risk. This is an individual contributor role focused on the day-to-day technical execution of the enterprise Data Loss Prevention (DLP) program, digital activity reviews, and response to data spills and compromises involving Controlled Unclassified Information (CUI) and other sensitive data.
The analyst will work closely with the IR/DLP team, Cybersecurity, Legal, HR, Privacy, and program security stakeholders to detect, investigate, and remediate insider risk and data protection events. Ideal candidates are technically hands-on, detail-oriented, exercise strong discretion, and are comfortable operating defensible investigative processes in a regulated government-contracting environment.
Responsibilities
DLP Administration & Program Expansion
- Administer, tune, and expand coverage of the enterprise DLP platform(s) across endpoint, email, network, cloud, and SaaS channels.
- Build, test, and refine DLP policies, rules, classifications, and detection use cases aligned to insider risk scenarios and regulatory drivers (CUI, DFARS, ITAR/EAR, PII, IP).
- Triage DLP alerts, reduce false positives, and continuously improve alert fidelity and analyst workflow.
- Support onboarding of new data sources, business units, and telemetry feeds into the DLP and user activity monitoring stack.
- Document standard operating procedures, runbooks, and configuration baselines for the DLP program.
Digital Activity Reviews
- Conduct digital activity reviews of user behavior, data movement, and endpoint activity in support of insider risk inquiries, HR referrals, Legal holds, and management-requested reviews.
- Correlate activity across DLP, EDR, SIEM, identity, email, and cloud audit logs to build clear, fact-based timelines.
- Produce concise written findings appropriate for HR, Legal, and security leadership audiences.
- Maintain defensible documentation, chain-of-custody, and evidence-handling practices throughout each review.
Data Spill & Compromise Response (CUI / DFARS 252.204-7012)
- Serve as a primary responder for data spills and suspected compromises involving CUI, export-controlled, proprietary, or other sensitive data.
- Execute containment, eradication, and sanitization actions in accordance with DFARS 252.204-7012, NIST SP 800-171, and Peraton internal incident response procedures.
- Coordinate notifications and reporting obligations (e.g., DoD Cyber Crime Center / DC3 reporting timelines, customer notifications) with Legal, Contracts, Program Security, and the CSOC.
- Maintain incident records, lessons-learned, and after-action reporting; recommend control improvements to prevent recurrence.
Collaboration & Continuous Improvement
- Partner with the CSOC, IT Operations, Privacy, Legal, HR, and Program Security on cross-functional investigations and response actions.
- Contribute to development of insider risk policies, standards, awareness content, and training.
- Support data analytics, automation, and scripting initiatives that improve investigative efficiency and metrics.
- Provide periodic reporting on DLP, digital activity review, and data spill metrics to IRDP leadership.
- Periodic on-call responsibilities in support of after-hours data spill and insider risk events.
Qualifications
- 8+ years of relevant experience with a Bachelor's degree in Cybersecurity, Information Systems, Intelligence, Criminal Justice, or related field
- 12+ years of relevant experience may be considered in lieu of degree.
- Minimum 5 years of combined experience across DLP administration, insider risk / user activity monitoring, digital forensics, or cybersecurity incident response.
- Minimum 3 years hands-on experience administering an enterprise DLP platform (e.g., Microsoft Purview, Symantec/Broadcom DLP, Forcepoint, Zscaler, Netskope, or equivalent), including policy authoring and tuning.
- Demonstrated experience conducting digital activity reviews or insider-risk investigations, including correlating data across endpoint, email, network, and cloud sources.
- Working knowledge of CUI handling requirements, DFARS 252.204-7012, and NIST SP 800-171.
- Basic proficiency with at least one scripting language (Python, PowerShell, KQL, SPL, or equivalent) for log analysis, automation, or data wrangling.
- Strong written and verbal communication skills, including the ability to translate technical findings into clear, audience-appropriate narratives for HR, Legal, and leadership.
- Strong attention to detail, sound judgment, discretion, and professional demeanor when handling sensitive matters.
- US Citizenship required.
- Ability to obtain a Top Secret security clearance.
- Ability to attend in-person meetings on occasion in Reston, VA.
Preferred Qualifications
- Experience supporting cybersecurity operations within a government contractor, DoD, or other regulated environment.
- Hands-on experience with EDR (e.g., CrowdStrike, Defender for Endpoint, SentinelOne) and SIEM (e.g., Splunk, Sentinel) for investigative workflows.
- Experience with insider risk platforms or UAM tools (e.g., Microsoft Purview Insider Risk Management, DTEX, Proofpoint ITM, Everfox/Forcepoint Insider Threat).
- Familiarity with digital forensics fundamentals (disk, memory, network, and cloud artifacts) and chain-of-custody practices.
- Experience reporting cyber incidents to DC3/DCISE or supporting customer cyber incident notifications.
- Relevant certifications such as GCFE, GCFA, GCIH, GCIA, CFE, CCFP, CISSP, CISM, or vendor-specific DLP/EDR certifications.
Key Success Traits
- Technically curious and operationally pragmatic — comfortable both tuning a policy and writing up an investigation.
- Strong judgment and discretion when handling sensitive personnel and data matters.
- Collaborative; works well across Cyber, Legal, HR, Privacy, and Program Security.
- Calm and methodical under time pressure, particularly during data spill response.
- Comfortable operating in ambiguous or evolving environments.
Details
Target Salary Range: $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
About Peraton
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we’re keeping people around the world safe and secure.
About The Role
Peraton is seeking an Insider Risk & Data Protection Engineer to join the Insider Risk and Data Protection (IR/DLP) Team within Corporate Security Compliance & Risk. This is an individual contributor role focused on the day-to-day technical execution of the enterprise Data Loss Prevention (DLP) program, digital activity reviews, and response to data spills and compromises involving Controlled Unclassified Information (CUI) and other sensitive data.
The analyst will work closely with the IR/DLP team, Cybersecurity, Legal, HR, Privacy, and program security stakeholders to detect, investigate, and remediate insider risk and data protection events. Ideal candidates are technically hands-on, detail-oriented, exercise strong discretion, and are comfortable operating defensible investigative processes in a regulated government-contracting environment.
Responsibilities
DLP Administration & Program Expansion
- Administer, tune, and expand coverage of the enterprise DLP platform(s) across endpoint, email, network, cloud, and SaaS channels.
- Build, test, and refine DLP policies, rules, classifications, and detection use cases aligned to insider risk scenarios and regulatory drivers (CUI, DFARS, ITAR/EAR, PII, IP).
- Triage DLP alerts, reduce false positives, and continuously improve alert fidelity and analyst workflow.
- Support onboarding of new data sources, business units, and telemetry feeds into the DLP and user activity monitoring stack.
- Document standard operating procedures, runbooks, and configuration baselines for the DLP program.
Digital Activity Reviews
- Conduct digital activity reviews of user behavior, data movement, and endpoint activity in support of insider risk inquiries, HR referrals, Legal holds, and management-requested reviews.
- Correlate activity across DLP, EDR, SIEM, identity, email, and cloud audit logs to build clear, fact-based timelines.
- Produce concise written findings appropriate for HR, Legal, and security leadership audiences.
- Maintain defensible documentation, chain-of-custody, and evidence-handling practices throughout each review.
Data Spill & Compromise Response (CUI / DFARS 252.204-7012)
- Serve as a primary responder for data spills and suspected compromises involving CUI, export-controlled, proprietary, or other sensitive data.
- Execute containment, eradication, and sanitization actions in accordance with DFARS 252.204-7012, NIST SP 800-171, and Peraton internal incident response procedures.
- Coordinate notifications and reporting obligations (e.g., DoD Cyber Crime Center / DC3 reporting timelines, customer notifications) with Legal, Contracts, Program Security, and the CSOC.
- Maintain incident records, lessons-learned, and after-action reporting; recommend control improvements to prevent recurrence.
Collaboration & Continuous Improvement
- Partner with the CSOC, IT Operations, Privacy, Legal, HR, and Program Security on cross-functional investigations and response actions.
- Contribute to development of insider risk policies, standards, awareness content, and training.
- Support data analytics, automation, and scripting initiatives that improve investigative efficiency and metrics.
- Provide periodic reporting on DLP, digital activity review, and data spill metrics to IRDP leadership.
- Periodic on-call responsibilities in support of after-hours data spill and insider risk events.
Qualifications
- 8+ years of relevant experience with a Bachelor's degree in Cybersecurity, Information Systems, Intelligence, Criminal Justice, or related field
- 12+ years of relevant experience may be considered in lieu of degree.
- Minimum 5 years of combined experience across DLP administration, insider risk / user activity monitoring, digital forensics, or cybersecurity incident response.
- Minimum 3 years hands-on experience administering an enterprise DLP platform (e.g., Microsoft Purview, Symantec/Broadcom DLP, Forcepoint, Zscaler, Netskope, or equivalent), including policy authoring and tuning.
- Demonstrated experience conducting digital activity reviews or insider-risk investigations, including correlating data across endpoint, email, network, and cloud sources.
- Working knowledge of CUI handling requirements, DFARS 252.204-7012, and NIST SP 800-171.
- Basic proficiency with at least one scripting language (Python, PowerShell, KQL, SPL, or equivalent) for log analysis, automation, or data wrangling.
- Strong written and verbal communication skills, including the ability to translate technical findings into clear, audience-appropriate narratives for HR, Legal, and leadership.
- Strong attention to detail, sound judgment, discretion, and professional demeanor when handling sensitive matters.
- US Citizenship required.
- Ability to obtain a Top Secret security clearance.
- Ability to attend in-person meetings on occasion in Reston, VA.
Preferred Qualifications
- Experience supporting cybersecurity operations within a government contractor, DoD, or other regulated environment.
- Hands-on experience with EDR (e.g., CrowdStrike, Defender for Endpoint, SentinelOne) and SIEM (e.g., Splunk, Sentinel) for investigative workflows.
- Experience with insider risk platforms or UAM tools (e.g., Microsoft Purview Insider Risk Management, DTEX, Proofpoint ITM, Everfox/Forcepoint Insider Threat).
- Familiarity with digital forensics fundamentals (disk, memory, network, and cloud artifacts) and chain-of-custody practices.
- Experience reporting cyber incidents to DC3/DCISE or supporting customer cyber incident notifications.
- Relevant certifications such as GCFE, GCFA, GCIH, GCIA, CFE, CCFP, CISSP, CISM, or vendor-specific DLP/EDR certifications.
Key Success Traits
- Technically curious and operationally pragmatic — comfortable both tuning a policy and writing up an investigation.
- Strong judgment and discretion when handling sensitive personnel and data matters.
- Collaborative; works well across Cyber, Legal, HR, Privacy, and Program Security.
- Calm and methodical under time pressure, particularly during data spill response.
- Comfortable operating in ambiguous or evolving environments.
Details
Target Salary Range: $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
See All 13 Remote Risk Data Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Remote Risk Data Analyst JobsRemote Risk Data Analyst Job Market
Who's Hiring
- Block2
- Surgery Partners2
- Peraton1
- Flynn1
- Virtua Health1
Top Industries Hiring
- Insurance4
- Consulting & Professional Services2
- Healthcare & Medical Services1
What Employers Look For
The qualifications that appear most often in remote risk data analyst jobs.
- Bachelor's degree in statistics, mathematics, finance, economics, or a related quantitative field
- Proficiency in SQL for querying large financial or operational datasets
- Experience with Python or R for statistical modeling and data analysis
- Familiarity with risk frameworks such as credit risk, market risk, or operational risk
- Knowledge of regulatory requirements including Basel III, CCAR, CECL, or DFAST
- Experience with data visualization tools such as Tableau, Power BI, or similar platforms
Tips for Your Remote Risk Data Analyst Job Search
Show async communication skills upfront
Remote risk teams depend on written handoffs and documented analysis. Include a brief sample of a risk summary, model write-up, or data memo you've produced independently. It signals you can work without real-time supervision, which remote hiring managers screen for early.
Apply early to remote roles that fit
Migrate Mate lists remote risk data analyst openings from across the U.S. in one place, so you can find roles that match your background and apply directly. Remote postings attract high volume quickly, so applying within the first few days of a listing going live improves your odds.
Highlight your remote risk toolset explicitly
Name the tools you actually use: SQL, Python, R, Tableau, or risk-specific platforms like SAS Risk or Moody's Analytics. Remote employers can't observe your workflow in person, so your application needs to make your technical environment visible and credible.
Prepare for async-style remote interviews
Many remote-first risk teams use recorded video questions or written case submissions before any live interview. Practice explaining a risk model decision or an analysis tradeoff in clear, structured writing. Remote interviewers are assessing how you communicate without body language cues.
Target remote-native companies in your search
Companies built as remote-first, including digital lenders, insurtech firms, and cloud-native financial platforms, have established processes for onboarding remote risk analysts. They're more likely to offer the tooling, documentation culture, and async workflows that make remote risk work sustainable long-term.
Remote Risk Data Analyst Jobs: Frequently Asked Questions
How do I get a remote risk data analyst job?
Target companies with distributed data or risk teams, including fintech platforms, digital insurers, and financial services firms that operate without a centralized office. Remote employers screen hard for self-direction, clear async written communication, and proficiency in SQL, Python, and risk modeling tools. A portfolio showing independent analysis work, clean documentation, and stakeholder-ready outputs gives you a clear edge over candidates with similar credentials.
Which companies hire remote risk data analysts?
Employers currently hiring remote risk data analysts include Block, Surgery Partners, and Peraton, per current remote listings on Migrate Mate as of June 2026. Remote-first financial services firms, insurtech and fintech companies, and large banks with distributed analytics teams account for the bulk of these openings.
Can you get a remote risk data analyst job with no experience?
Yes, but remote entry-level risk data analyst roles are harder to land because employers expect you to work independently from day one without in-person support. Companies most likely to hire remote entry-level candidates include fintech startups and digital lenders. Showing a portfolio with risk-related projects, strong SQL and Python skills, and evidence of self-directed work can open the door when experience is thin.
Do you need a degree for remote risk data analyst jobs?
Not always. Many remote employers prioritize demonstrated skills over formal credentials, especially in fintech and data-heavy startups. What matters most is your ability to build and interpret risk models, communicate findings clearly in writing, and work without supervision. Certifications in data analysis or risk management, combined with a strong project portfolio, can substitute for a traditional degree in a meaningful share of remote postings.
Which industries hire the most remote risk data analysts?
The sectors hiring the most remote risk data analysts are Insurance, Consulting & Professional Services, and Healthcare & Medical Services, based on current remote listings on Migrate Mate as of June 2026. These industries rely on distributed analytics teams to monitor credit, operational, and compliance risk across geographies without requiring analysts to be on-site.
See All 13 Remote Risk Data Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Remote Risk Data Analyst Jobs