Sr. Security Engineer, Insider Threat Detection & Response

Our client, a leading online travel and hospitality marketplace, is looking to hire a Senior Security Engineer, Insider Threat Detection & Response, in a 100% remote role (United States)., * Write detections for data abuse and data exfiltration at scale

• Build anomaly-detection models and automation to identify unusual user behavior and support response to insider threats
• Hunt for insider threats across corporate and production environments
• Identify gaps in logging and visibility, and partner with teams across the business to close them
• Partner with HR and Legal on sensitive, complex investigations
• Provide expertise and support during insider threat incidents
• Help design countermeasures to reduce insider risk, and contribute to security awareness messaging and training
• Participate in the team’s 24/7 on-call rotation for threat detection and incident response

• 5+ years of hands-on security operations experience, including detection engineering, threat hunting, incident response, digital forensics and/or threat intelligence
• Experience with anomaly or behavior-based detection
• Programming fundamentals in Python and working knowledge of SQL
• Solid understanding of networking and security fundamentals
• Experience with insider threat technologies such as DLP and UEBA
• Understanding of how insider threat and incident response work together, including coordinating response to insider incidents
• Familiarity with the MITRE ATT&CK and Cyber Kill Chain frameworks
• Experience automating security detection and response
• Experience with AWS (EC2, S3, Lambda, RDS) preferred
• Knowledge of insider threats in consumer-facing (B2C) companies is a plus
• Bachelor’s degree in a technical field or equivalent practical experience
• Candidates will complete a proctored technical assessment as part of the interview process