> Markdown version of [/jobs/ext/3761574-sr-security-engineer-insider-threat-detection-response](https://www.wearedevelopers.com/jobs/ext/3761574-sr-security-engineer-insider-threat-detection-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Security Engineer, Insider Threat Detection & Response

- **Company:** Russell Tobin
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $239,200.0 - $284,960.0
- **Contract:** Contract
- **Skills:** Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Cyber Security, Digital Forensics, Intrusion Detection and Prevention, Python (Programming Language), Standard Sql, Data Logging, Mitre Att&ck, Amazon Relational Database Service, Cybercrime, Functional Programming
- **Published:** October 15, 2026
- **Apply:** https://www.dice.com/job-detail/44e23ad3-4bde-4a91-bb84-3bc4c77a0064

## About the Role

* 5+ years of hands-on security operations experience, including detection engineering, threat hunting, incident response, digital forensics and/or threat intelligence
 * Experience with anomaly or behavior-based detection
 * Programming fundamentals in Python and working knowledge of SQL
 * Solid understanding of networking and security fundamentals
 * Experience with insider threat technologies such as DLP and UEBA
 * Understanding of how insider threat and incident response work together, including coordinating response to insider incidents
 * Familiarity with the MITRE ATT&CK and Cyber Kill Chain frameworks
 * Experience automating security detection and response
 * Experience with AWS (EC2, S3, Lambda, RDS) preferred
 * Knowledge of insider threats in consumer-facing (B2C) companies is a plus
 * Bachelor's degree in a technical field or equivalent practical experience
 * Candidates will complete a proctored technical assessment as part of the interview process

## Description

Our client, a leading online travel and hospitality marketplace, is looking to hire a Senior Security Engineer, Insider Threat Detection & Response, in a 100% remote role (United States)., * Write detections for data abuse and data exfiltration at scale

 * Build anomaly-detection models and automation to identify unusual user behavior and support response to insider threats
 * Hunt for insider threats across corporate and production environments
 * Identify gaps in logging and visibility, and partner with teams across the business to close them
 * Partner with HR and Legal on sensitive, complex investigations
 * Provide expertise and support during insider threat incidents
 * Help design countermeasures to reduce insider risk, and contribute to security awareness messaging and training
 * Participate in the team's 24/7 on-call rotation for threat detection and incident response