Senior Security Engineer – Insider Risk

This is a fully remote position, open to applicants in Rhode Island.

📋 Description

• Conduct investigations related to insider risk, establish investigative timelines, facilitate interviews, and document findings.

• Manage routine investigations independently while providing support to senior analysts on more complex or sensitive issues.

• Triage and correlate data from SIEM, EDR, DLP, UBA, email security, and various other investigative tools.

• Execute digital forensic analysis on devices operating Windows, macOS, Android, and iOS.

• Create reports and status updates tailored for both technical and non-technical stakeholders.

• Ensure maintenance of case documentation, evidence handling procedures, and adherence to chain of custody requirements.

• Collaborate with SOC, Corporate Security, Legal, HR, and business teams during investigations and risk mitigation efforts.

• Recognize insider-risk trends, suggest corrective measures, and enhance detection, investigation, and response capabilities.

• Be part of an on-call schedule for urgent investigations and incident response activities.

⛳️ Requirements

• Over 5 years of pertinent experience in information security and associated technologies.

• More than 3 years of experience in digital forensics, incident response, or functions related to insider risk investigations.

• At least 1 year of experience with evidence handling, chain of custody, and modern digital forensic tools.

• A minimum of 2 active DoD 8140 certifications.

• At least 1 Intermediate / Level 2 technical certification, such as SSCP, GSEC, CySA+, or Security+ CE.

• Practical experience with SIEM platforms and proficiency in query languages.

• Hands-on experience with EDR and DLP tools.

• Knowledge of attacker techniques, log sources, and endpoint indicators of compromise.

• Familiarity with Insider Risk Management or User Behavior Analytics platforms.

• Experience in supporting investigations alongside HR, Legal, or Corporate Security.

• Capacity to manage sensitive and confidential issues with discretion and sound judgment.

• Training or coursework in investigative interviewing methodologies.

• Excellent written and verbal communication skills.

• Relevant industry certifications such as SANS/GIAC GCFE, GCIH, GCFA, GASF, CySA+, CASP+, or CISSP.

• A Bachelor's degree from an accredited institution, or an equivalent combination of education and relevant work experience.

• A High School Diploma/GED combined with 4 years of related experience is an acceptable alternative educational pathway.

• Willingness to participate in an on-call schedule.

🏝️ Benefits

• Bonus, commission, or short-term incentive program from CVS Health in addition to base salary.

• Medical insurance coverage.

• Dental insurance coverage.

• Vision insurance coverage.

• Paid time off benefits.

• Options for retirement savings.

• Wellness programs available.

• Additional resources that support physical, emotional, and financial well-being.