Insider Threat Engineer

Job Summary

Focused on building scalable detection and response capabilities, the full-time Insider Threat Engineer will investigate security incidents, hunt for threats, and develop automation for threat identification and response while working remotely.

Key responsibilities

• Investigate security incidents using digital forensics and data analytics techniques
• Develop and maintain detection models and automation for threat identification and response
• Collaborate with engineering teams to design and implement advanced detection solutions

Required qualifications

• 5+ years of hands-on technical experience in security operations, including incident response and threat hunting
• Strong proficiency in Python or other scripting languages
• Experience with SQL and Pandas for data analytics and investigations
• Knowledge of the Cyber Kill Chain and MITRE ATT&CK frameworks
• Experience automating security detection and response workflows