Insider Threat Engineer

Job Summary

Working remotely on a full-time basis, the Insider Threat Engineer will focus on building scalable detection and response capabilities through automation, threat hunting, and incident management while collaborating with cross-functional teams to enhance security posture.

Key responsibilities

• Investigate security incidents using digital forensics and data analytics techniques
• Develop and maintain detection models and automation for threat identification and response
• Collaborate with engineering teams to design and implement advanced detection solutions

Required qualifications

• 5+ years of hands-on technical experience in security operations, including incident response and threat detection
• Strong proficiency in Python or other scripting languages
• Experience with SQL and Pandas for data analytics and investigations
• Knowledge of the Cyber Kill Chain and MITRE ATT&CK frameworks
• Ability to lead complex incident response situations through influence