Insider Threat Security Engineer - 1773 - 177702

ZP Group
United States
2 days ago
Apply on www.careerbuilder.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Compensation
$120,000 - $160,000
Working hours
Regular working hours

Tech stack

Cyber Security Computer Networks Domain Name System (DNS) Systems Analysis Internet Security Intrusion Detection and Prevention Network Security Network Architecture Networking Basics Routing Security Information and Event Management TCP/IP
+4 more
QRadar Cybercrime Microsoft Sentinel Splunk

Job description

Responsibilities: of the Insider Threat Security Engineer: Investigate suspected and confirmed insider threat incidents as part of the organization’s CSIRT function. Perform proactive threat hunting activities to identify abnormal user behavior and potential security risks. Lead incident response efforts from initial investigation through containment, remediation, and post-incident documentation. Develop, maintain, and optimize security detections, dashboards, and SPL queries within Splunk and other SIEM platforms. Utilize UBA and UEBA technologies to identify, analyze, and mitigate insider risk across the environment. Partner with infrastructure, networking, and security teams to investigate complex security events and strengthen detection capabilities. Analyze system logs, endpoint telemetry, network traffic, and other security data sources to support investigations and monitoring efforts. Qualifications: of the Insider Threat Security Engineer: 8+ years of experience in cybersecurity

Requirements

Computer Security, Splunk, Telemetry, Analysis Skills, Internet Security, Reporting Dashboards, Network Architecture/Engineering, Writing Skills, Hunting, Systems Analysis, security operations, incident response, threat hunting, or insider threat programs. Strong experience working with Splunk or comparable SIEM solutions such as Microsoft Sentinel, QRadar, LogRhythm, or Elastic. Proven ability to write and modify advanced SPL searches and detection logic. Hands-on experience investigating suspicious activity using UBA and/or UEBA platforms. Strong understanding of networking fundamentals including TCP/IP, DNS, routing, switching, and network security. Previous experience in systems administration, network engineering, or infrastructure operations is highly preferred. Demonstrated experience conducting security investigations, threat hunting engagements, and incident response activities. Compensation: & Benefits: $120,000 - $160,000 Comprehensive benefits package including Medical, Dental, Vision, PTO, Paid Holidays, and additional leave offerings where applicable.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.careerbuilder.com
Prepare application

Good distractions

Loading talks and stories from around this role…