> Markdown version of [/jobs/ext/4546699-insider-threat-security-engineer-177504](https://www.wearedevelopers.com/jobs/ext/4546699-insider-threat-security-engineer-177504). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Insider Threat Security Engineer - 177504

- **Company:** ZP Group
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Salary:** $120,000 - $160,000
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Computer Networks, Domain Name System (DNS), Internet Security, Intrusion Detection and Prevention, Network Security, Log Analysis, Network Architecture, Routing, Security Information and Event Management, TCP/IP, QRadar, Cybercrime, Microsoft Sentinel, Splunk
- **Published:** November 3, 2026
- **Apply:** https://www.careerbuilder.com/job-details/insider-threat-security-engineer-177504-new-york-ny--c01bfea2-736e-49b1-ba3f-f8ddc61542cc

## About the Role

Computer Security, Splunk, Computer Security, Telemetry, Legal, Internet Security, Security Monitoring, Security Information and Event Management (SIEM), Network Architecture/Engineering, Hunting, Engineer: * 8+ years of experience in cybersecurity, incident response, threat hunting, security operations, or insider threat programs. * Hands-on experience with Splunk or comparable SIEM platforms such as QRadar, LogRhythm, Microsoft Sentinel, or Elastic. * Ability to create and modify SPL queries from scratch. * Experience utilizing UBA and/or UEBA solutions to investigate suspicious user activity. * Strong understanding of networking concepts including TCP/IP, DNS, routing, switching, and network security fundamentals. * Background in systems administration, network engineering, or infrastructure operations prior to moving into security is highly preferred. * Experience performing hands-on security investigations, threat hunting, and incident response activities. Compensation: for the Insider Threat Security Engineer: * $120,000 - $160,000 * Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.

## Description

Responsibilities: of the Insider Threat Security Engineer: * Investigate actual and suspected insider security incidents as part of the Computer Security Incident Response Team (CSIRT). * Conduct threat hunting activities and proactively identify anomalous user behavior across the enterprise environment. * Lead incident response efforts including investigation, containment, remediation, and documentation of security events. * Develop, optimize, and maintain SIEM detections and custom SPL queries to identify suspicious activity. * Utilize User Behavior Analytics (UBA) and User & Entity Behavior Analytics (UEBA) tools to detect insider threats and reduce organizational risk. * Collaborate with infrastructure, networking, and security teams to investigate complex incidents and improve detection capabilities. * Analyze logs, network traffic, system activity, and endpoint telemetry to support investigations and security monitoring efforts. Requirements of the Insider Threat Security