Insider Threat Engineer

Job Summary

Working remotely, the full-time Insider Threat Engineer will identify, investigate, and mitigate insider threats through advanced analytics and user behavior monitoring while leveraging strong SPL querying expertise and hands-on experience with UEBA platforms.

Key responsibilities

• Develop and maintain detections, correlation searches, and threat-hunting queries using SPL
• Monitor and investigate insider threat activity utilizing UEBA platforms
• Analyze anomalous user behavior and support incident response activities related to insider threats

Required qualifications

• 4+ years of experience in cybersecurity, threat detection, or security operations roles
• Strong hands-on experience writing and optimizing SPL queries
• Experience with UEBA platforms such as Splunk UBA, Exabeam, or similar technologies
• Knowledge of SIEM technologies and threat detection methodologies
• Relevant security certifications such as Security+, CySA+, or CISSP are preferred