> Markdown version of [/jobs/ext/2011181-insider-threat-engineer](https://www.wearedevelopers.com/jobs/ext/2011181-insider-threat-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Insider Threat Engineer - **Company:** Renal Care Group of The Midwest, Inc. - **Location:** San Diego, CA, United States (Remote available) - **Contract:** Permanent contract - **Skills:** Cyber Security, Digital Forensics, Python (Programming Language), SQL Databases, Mitre Att&ck, Pandas, Data Analytics - **Published:** August 10, 2026 - **Apply:** https://careersingovernment.com/job/2424941/insider-threat-engineer-34/ ## About the Role Focused on building scalable detection and response capabilities, the full-time Insider Threat Engineer will investigate security incidents, hunt for threats, and develop automation for threat identification and response while working remotely.Key responsibilitiesInvestigate security incidents using digital forensics and data analytics techniquesDevelop and maintain detection models and automation for threat identification and responseCollaborate with engineering teams to design and implement advanced detection solutionsRequired qualifications5+ years of hands-on technical experience in security operations, including incident response and threat huntingStrong proficiency in Python or other scripting languagesExperience with SQL and Pandas for data analytics and investigationsKnowledge of the Cyber Kill Chain and MITRE ATT&CK frameworksExperience automating security detection and response workflows Focused on building scalable detection and response capabilities, the full-time Insider Threat Engineer will investigate security incidents, hunt for threats, and develop automation for threat identification and response while working remotely.Key responsibilitiesInvestigate security incidents using digital forensics and data analytics techniquesDevelop and maintain detection models and automation for threat identification and responseCollaborate with engineering teams to design and implement advanced detection solutionsRequired qualifications5+ years of hands-on technical experience in security operations, including incident response and threat huntingStrong proficiency in Python or other scripting languagesExperience with SQL and Pandas for data analytics and investigationsKnowledge of the Cyber Kill Chain and MITRE ATT&CK frameworksExperience automating security detection and response workflows ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) - [Advanced Typing in TypeScript](https://www.wearedevelopers.com/videos/496-advanced-typing-in-typescript) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1520-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) - [Data Science on Software Data](https://www.wearedevelopers.com/videos/162-data-science-on-software-data) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)