Security Engineer, Insider Threat
New
G
GoDaddyInformation Security
India, RemoteFull-TimeMiddle
Salary1,820,000 - 3,380,000 INR per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 2+ years
Requirements
- 2+ years of direct experience in information security investigations, incident response, or SOC operations.
- Hands-on experience with SIEM platforms (Splunk preferred).
- Experience interpreting endpoint telemetry (SentinelOne preferred or comparable EDR).
- Experience with data governance or data loss prevention tools (Microsoft Purview preferred).
- Strong understanding of Windows, macOS, and enterprise authentication systems.
- Ability to write and tune log queries for investigation and detection.
- Strong analytical and documentation skills.
- Experience examining data exfiltration, privilege misuse, or account compromise.
Responsibilities
- Develop and refine insider threat detections using log analytics and behavioral data.
- Monitor systems for data exfiltration, privilege misuse, policy violations, and unusual user behavior.
- Utilize SIEM (Splunk), endpoint telemetry (SentinelOne), and data governance platforms (Microsoft Purview) for detection.
- Conduct structured insider threat investigations using endpoint, identity, cloud, and collaboration platform telemetry.
- Produce investigation summaries for Legal, HR, and executive collaborators.
- Partner with SOC, Detection Engineering, CTI, HR, Legal, and Privacy teams during security incidents.
- Contribute to the refinement of insider threat playbooks and standard operating procedures.
View Full Description & ApplyYou'll be redirected to the employer's site
