> Markdown version of [/jobs/ext/4661090-insider-threat-security-engineer-1773-177702](https://www.wearedevelopers.com/jobs/ext/4661090-insider-threat-security-engineer-1773-177702). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Insider Threat Security Engineer - 1773 - 177702

- **Company:** ZP Group
- **Location:** United States
- **Experience:** Expert
- **Salary:** $120,000 - $160,000
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Computer Networks, Domain Name System (DNS), Systems Analysis, Internet Security, Intrusion Detection and Prevention, Network Security, Network Architecture, Networking Basics, Routing, Security Information and Event Management, TCP/IP, QRadar, Cybercrime, Microsoft Sentinel, Splunk
- **Published:** November 10, 2026
- **Apply:** https://www.careerbuilder.com/job-details/insider-threat-security-engineer-1773-177702--19c6602d-30e7-438b-b7af-ec3f1c308919

## About the Role

Computer Security, Splunk, Telemetry, Analysis Skills, Internet Security, Reporting Dashboards, Network Architecture/Engineering, Writing Skills, Hunting, Systems Analysis, security operations, incident response, threat hunting, or insider threat programs. Strong experience working with Splunk or comparable SIEM solutions such as Microsoft Sentinel, QRadar, LogRhythm, or Elastic. Proven ability to write and modify advanced SPL searches and detection logic. Hands-on experience investigating suspicious activity using UBA and/or UEBA platforms. Strong understanding of networking fundamentals including TCP/IP, DNS, routing, switching, and network security. Previous experience in systems administration, network engineering, or infrastructure operations is highly preferred. Demonstrated experience conducting security investigations, threat hunting engagements, and incident response activities. Compensation: & Benefits: $120,000 - $160,000 Comprehensive benefits package including Medical, Dental, Vision, PTO, Paid Holidays, and additional leave offerings where applicable.

## Description

Responsibilities: of the Insider Threat Security Engineer: Investigate suspected and confirmed insider threat incidents as part of the organization's CSIRT function. Perform proactive threat hunting activities to identify abnormal user behavior and potential security risks. Lead incident response efforts from initial investigation through containment, remediation, and post-incident documentation. Develop, maintain, and optimize security detections, dashboards, and SPL queries within Splunk and other SIEM platforms. Utilize UBA and UEBA technologies to identify, analyze, and mitigate insider risk across the environment. Partner with infrastructure, networking, and security teams to investigate complex security events and strengthen detection capabilities. Analyze system logs, endpoint telemetry, network traffic, and other security data sources to support investigations and monitoring efforts. Qualifications: of the Insider Threat Security Engineer: 8+ years of experience in cybersecurity