Insider Threat Engineer

Job Summary

Working remotely, the Insider Threat Engineer will identify, investigate, and mitigate insider threats using advanced analytics and user behavior monitoring technologies while developing detection strategies and collaborating with various teams.

Key responsibilities

• Develop and maintain detections, correlation searches, and threat-hunting queries using SPL
• Monitor and investigate insider threat activity utilizing UEBA platforms
• Analyze anomalous user behavior and recommend improvements to insider risk monitoring capabilities

Required qualifications

• 4+ years of experience in cybersecurity, threat detection, or security operations roles
• Strong hands-on experience writing and optimizing SPL queries
• Experience with UEBA platforms such as Splunk UBA, Exabeam, or similar technologies
• Knowledge of SIEM technologies and threat detection methodologies
• Relevant security certifications such as Security+, CySA+, or CISSP are preferred