Insider Threat Security Engineer - 177504

ZP Group
New York, NY, United States
9 days ago
Apply on www.careerbuilder.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Compensation
$120,000 - $160,000
Working hours
Regular working hours

Tech stack

Cyber Security Computer Networks Domain Name System (DNS) Internet Security Intrusion Detection and Prevention Network Security Log Analysis Network Architecture Routing Security Information and Event Management TCP/IP QRadar
+3 more
Cybercrime Microsoft Sentinel Splunk

Job description

Responsibilities: of the Insider Threat Security Engineer: * Investigate actual and suspected insider security incidents as part of the Computer Security Incident Response Team (CSIRT). * Conduct threat hunting activities and proactively identify anomalous user behavior across the enterprise environment. * Lead incident response efforts including investigation, containment, remediation, and documentation of security events. * Develop, optimize, and maintain SIEM detections and custom SPL queries to identify suspicious activity. * Utilize User Behavior Analytics (UBA) and User & Entity Behavior Analytics (UEBA) tools to detect insider threats and reduce organizational risk. * Collaborate with infrastructure, networking, and security teams to investigate complex incidents and improve detection capabilities. * Analyze logs, network traffic, system activity, and endpoint telemetry to support investigations and security monitoring efforts. Requirements of the Insider Threat Security

Requirements

Computer Security, Splunk, Computer Security, Telemetry, Legal, Internet Security, Security Monitoring, Security Information and Event Management (SIEM), Network Architecture/Engineering, Hunting, Engineer: * 8+ years of experience in cybersecurity, incident response, threat hunting, security operations, or insider threat programs. * Hands-on experience with Splunk or comparable SIEM platforms such as QRadar, LogRhythm, Microsoft Sentinel, or Elastic. * Ability to create and modify SPL queries from scratch. * Experience utilizing UBA and/or UEBA solutions to investigate suspicious user activity. * Strong understanding of networking concepts including TCP/IP, DNS, routing, switching, and network security fundamentals. * Background in systems administration, network engineering, or infrastructure operations prior to moving into security is highly preferred. * Experience performing hands-on security investigations, threat hunting, and incident response activities. Compensation: for the Insider Threat Security Engineer: * $120,000 - $160,000 * Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.careerbuilder.com
Prepare application

Good distractions

Loading talks and stories from around this role…