Insider Threat Security Engineer

Job Summary

To support a leading cybersecurity organization, the remote Insider Threat Security Engineer will identify, investigate, and mitigate insider risks through advanced threat detection, behavioral analytics, and proactive monitoring activities on a long-term contract basis.

Key responsibilities

• Conduct proactive insider threat hunting and monitoring activities to identify suspicious user behavior
• Develop and optimize SPL queries within Splunk for insider risk detection and investigations
• Collaborate with cross-functional teams to support insider risk management initiatives and document investigative findings

Required qualifications

• 5+ years of experience in cybersecurity, insider threat, or incident response
• Strong hands-on experience with Splunk, including developing SPL queries from scratch
• Experience with UEBA or UBA platforms and behavioral analytics methodologies
• Proven experience in threat hunting and security event analysis
• Strong understanding of insider threat programs and risk identification techniques