Insider Threat Security Engineer

Job Summary

Working remotely on a long-term contract basis, the Insider Threat Security Engineer will identify, investigate, and mitigate insider risks through advanced threat detection and behavioral analytics.

Key responsibilities

• Conduct proactive insider threat hunting and monitoring activities to identify suspicious user behavior
• Develop and optimize SPL queries within Splunk to support insider risk detection and investigations
• Collaborate with cross-functional teams to support insider risk management initiatives and document findings

Required qualifications

• 5+ years of experience in cybersecurity, insider threat, or incident response
• Strong hands-on experience with Splunk and creating SPL queries from scratch
• Experience with UEBA or UBA platforms and behavioral analytics methodologies
• Proven experience in threat hunting and security event analysis
• Strong understanding of insider threat programs and risk identification techniques