Senior Security Engineer, Insider Threat Detection – Response

This is a fully remote position, open to applicants in United States.

📋 Description

• Identify gaps in infrastructure visibility and collaborate with business teams to enhance logging and detection capabilities.

• Design and develop detections aimed at preventing data misuse and data exfiltration on a large scale.

• Create automation and detection models to highlight anomalous activities and expedite response efforts.

• Actively seek out insider threats across both corporate and production environments.

• Collaborate with engineering teams to create advanced detection solutions.

• Work alongside Human Resources and Legal teams on intricate investigations.

• Suggest and assist in the design of countermeasures to mitigate insider risk.

• Engage in incident response and offer subject-matter expertise during incidents related to insider threats.

• Take part in an on-call rotation to ensure 24/7 detection and response coverage.

• Contribute to security awareness communications and training initiatives.

⛳️ Requirements

• A minimum of 5 years of hands-on experience in security operations, including detection engineering, threat hunting, incident response, digital forensics, or threat intelligence.

• Bachelor’s degree in a relevant technical field, or equivalent practical experience.

• Familiarity with insider threat technologies such as Data Loss Prevention (DLP) and User and Entity Behavior Analytics (UEBA).

• Understanding of data science and analytical methods applicable to insider threat detection.

• Experience in automating security detection and response processes.

• Strong comprehension of insider threat dynamics and incident response coordination.

• Practical knowledge of the challenges posed by insider threats in consumer-facing organizations.

• Awareness of the Cyber Kill Chain and MITRE ATT&CK frameworks and their relevance to insider threats.

• Self-driven, innovative problem-solver capable of working independently.

• Ability to maintain composure and cooperation under pressure in time-sensitive situations.

• Excellent organizational, prioritization, and multitasking abilities.

• Preferred: experience with AWS services like EC2, S3, Lambda, and RDS.

• Preferred: proficiency in Python and SQL.

• Must be authorized to work in the U.S. without the need for sponsorship.

🏝️ Benefits

• Comprehensive benefits package.

• Participation in a 24/7 detection and response on-call rotation.

• Full-time schedule of 40 hours per week.