Insider Threat Security Engineer

Job Summary

Working remotely on a long-term contract basis, the Insider Threat Security Engineer will identify, investigate, and mitigate insider risks through advanced threat detection, behavioral analytics, and proactive monitoring activities.

Key responsibilities:

• Conduct proactive insider threat hunting and monitoring activities to identify suspicious or malicious user behavior
• Develop and optimize SPL queries within Splunk to support insider risk detection and investigations
• Collaborate with various teams to support insider risk management initiatives and document investigative findings

Required qualifications:

• 5+ years of experience in cybersecurity, insider threat, or security operations
• Strong hands-on experience with Splunk, including developing SPL queries from scratch
• Experience with UEBA or UBA platforms and behavioral analytics methodologies
• Proven experience in threat hunting, investigations, and security event analysis
• Strong understanding of insider threat programs and risk identification techniques