Insider Threat Security Engineer

Job Summary

To support a leading cybersecurity organization, the long-term, open-ended contract Insider Threat Security Engineer will work remotely to identify, investigate, and mitigate insider risks through advanced threat detection and behavioral analytics.

Key responsibilities

• Conduct proactive insider threat hunting and monitoring activities to identify suspicious user behavior
• Develop and optimize SPL queries within Splunk to enhance insider risk detection and investigations
• Collaborate with cross-functional teams to support insider risk management initiatives and document findings

Required qualifications

• 5+ years of experience in cybersecurity, insider threat, or incident response
• Strong hands-on experience with Splunk and developing SPL queries from scratch
• Experience with UEBA or UBA platforms and behavioral analytics methodologies
• Proven experience in threat hunting and security event analysis
• Strong understanding of insider threat programs and risk identification techniques