Remote Cybersecurity Analyst

The Cybersecurity Analyst - Insider Risk Analytics will provide specialized technical and analytical support to Experian’s global Insider Risk Management Program within the Cyber Fusion Centre. The role focuses on enhancing insider risk detection capabilities, supporting investigations, developing analytical use cases, and improving operational efficiency through advanced data analysis and automation.

The contractor will analyze and correlate complex datasets across multiple security technologies, develop detection logic, build dashboards and queries, and automate analytical and investigative processes. The position requires strong hands-on technical expertise in SIEM, UEBA, DLP, scripting, and data analytics. The role will also support proactive analysis of emerging insider and cyber threat trends and collaborate with internal teams to identify opportunities to improve detection accuracy and investigative effectiveness.

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent practical experience. Minimum 3-4 years of experience in cybersecurity investigations, security analytics, insider risk, or a related technical security discipline. Hands-on experience using SIEM, UEBA, and DLP technologies to analyze security events, investigate suspicious activity, and identify potential insider threats. Demonstrated ability to independently develop complex SIEM queries, correlation searches, dashboards, and analytical content using YARA-L, SPL, KQL, SQL, or equivalent query and detection languages. Experience analyzing and correlating large datasets across multiple security technologies to identify anomalies and behavioral patterns. Proficiency in scripting or programming languages such as Python, PowerShell, or equivalent technologies to automate analytical and investigative workflows. Experience with security monitoring, threat detection, incident response, and investigative processes within a SOC or similar cybersecurity environment. Strong analytical and problem-solving skills, with the ability to investigate complex technical issues and translate findings into actionable insights. Knowledge of insider and cyber threat trends, detection techniques, and opportunities to improve monitoring and analytical capabilities. Strong written and verbal communication skills, including the ability to explain technical findings to investigative teams and other stakeholders. Business-fluent English required. Experience supporting enterprise insider risk or data loss prevention programs. Familiarity with Google Security Operations (SecOps), including YARA-L detection logic and advanced security event analysis. Experience developing specialized dashboards, analytical workflows, or automated investigative solutions. Relevant certifications, including CERT Insider Threat Program Manager (ITPM) Certificate, Global Counter-Insider Threat Professional (GCITP), CISSP, GCIH, or other relevant GIAC certifications or SANS cybersecurity training.