Insider Threat Security Engineer - 177504
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
+3 more
Job description
Responsibilities: of the Insider Threat Security Engineer: * Investigate actual and suspected insider security incidents as part of the Computer Security Incident Response Team (CSIRT). * Conduct threat hunting activities and proactively identify anomalous user behavior across the enterprise environment. * Lead incident response efforts including investigation, containment, remediation, and documentation of security events. * Develop, optimize, and maintain SIEM detections and custom SPL queries to identify suspicious activity. * Utilize User Behavior Analytics (UBA) and User & Entity Behavior Analytics (UEBA) tools to detect insider threats and reduce organizational risk. * Collaborate with infrastructure, networking, and security teams to investigate complex incidents and improve detection capabilities. * Analyze logs, network traffic, system activity, and endpoint telemetry to support investigations and security monitoring efforts. Requirements of the Insider Threat Security
Requirements
Computer Security, Splunk, Computer Security, Telemetry, Legal, Internet Security, Security Monitoring, Security Information and Event Management (SIEM), Network Architecture/Engineering, Hunting, Engineer: * 8+ years of experience in cybersecurity, incident response, threat hunting, security operations, or insider threat programs. * Hands-on experience with Splunk or comparable SIEM platforms such as QRadar, LogRhythm, Microsoft Sentinel, or Elastic. * Ability to create and modify SPL queries from scratch. * Experience utilizing UBA and/or UEBA solutions to investigate suspicious user activity. * Strong understanding of networking concepts including TCP/IP, DNS, routing, switching, and network security fundamentals. * Background in systems administration, network engineering, or infrastructure operations prior to moving into security is highly preferred. * Experience performing hands-on security investigations, threat hunting, and incident response activities. Compensation: for the Insider Threat Security Engineer: * $120,000 - $160,000 * Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this roleβ¦