Sr. Security Engineer, Insider Threat Detection & Response

Job Description

This is the front-line team that detects, investigates, and responds to security threats and malicious activity against our data, systems and infrastructure.
To further increase our coverage, the team is looking to build a mature and world-class insider threat program. This is a key role to implement and execute our vision for insider threat detection capabilities while working closely with other team members. As a security engineer, you will have direct impact building capabilities for a new program through influence and technical contributions.
Be part of the on-call rotation to provide 24/7 coverage for threat detection and incident response.
Use your coding, data analytics and investigation skills to hunt, detect and respond to insider threats.
Write detection to detect data abuse and data exfiltration at scale.
Work side by side with our engineering teams to build advanced detection solutions to help keep systems and information safe, and partner closely with our Human Resources and Legal teams to carry out complex investigations.
Partner with stakeholders to contribute to Security Awareness messaging and Training.
5+ years of hands-on in-depth knowledge and technical experience in security operations including detection engineering, threat hunting, incident response, digital forensics, and/or threat intelligence.
~ Bachelor’s degree in a related technical field or equivalent practical experience.
~ Exposure to data science and analytics solutions applicable to the insider threat detection space.
~ Experience with Insider Threat technologies (Data Loss Prevention solutions, UEBA, ).
~ Knowledge and familiarity of the Cyber Kill Chain Framework and MITRE ATT&CK Framework and how these apply to the insider threat landscape.
~ Experience in AWS services (EC2, S3, Lambda, RDS) preferred
~ We are not focused on specific tools but we often use Python, AWS, SQL, and more.
~ Self-motivated and creative problem-solver able to work independently with minimal guidance.
~