Insider Risk Security Engineer

Job Summary

Joining a dynamic team, the full-time Insider Risk Security Engineer will operate remotely, focusing on enhancing the Insider Risk Program's detection capabilities, conducting investigations, and collaborating with HR, Legal, and executive stakeholders.

Key responsibilities

• Refine detection rules to improve alert accuracy and coverage within the Insider Risk Program
• Conduct endpoint and user activity investigations using EDR/XDR, UEBA, and SIEM tools, managing cases from start to finish
• Develop and iterate insider risk investigation playbooks, translating case patterns into scalable processes

Required qualifications

• Minimum of 6+ years of experience in insider risk, data protection, fraud investigation, or security operations
• Foundational understanding of AI/ML technologies and their application in security contexts
• Experience managing alerts within a SIEM or SOAR environment
• Proficiency in Python or JavaScript for automating investigative workflows
• Strong communication skills for engaging with cross-functional stakeholders while maintaining discretion