Senior Security Engineer, Insider Threat Detection & Response
New
M
Maleda TechInformation security
Remote (within the U.S.)ContractSenior
Salary115 - 137 USD per hour
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of hands-on experience in security operations
- Required Skills
- PythonSQL
Requirements
- Have 5+ years of hands-on experience in security operations, such as detection engineering, threat hunting, incident response, digital forensics, or threat intelligence.
- Hold a bachelor’s degree in a related technical field or have equivalent practical experience.
- Have experience with insider threat technologies such as Data Loss Prevention (DLP) and User and Entity Behavior Analytics (UEBA).
- Have exposure to data science and analytics approaches applied to insider threat detection.
- Have experience automating security detection and response.
- Understand how insider threat and incident response connect, including coordinating responses to insider incidents.
- Have working knowledge of insider threat challenges at consumer-facing companies.
- Be familiar with the Cyber Kill Chain and MITRE ATT&CK frameworks and their application to insider threats.
- Be available to participate in an on-call rotation supporting 24/7 detection and response coverage.
- Preferred: experience with AWS services such as EC2, S3, Lambda, and RDS.
- Preferred: proficiency in Python and SQL.
- This is a 12-month W-2 contract.
Responsibilities
- Identify infrastructure visibility gaps and partner with business teams to improve logging and detection.
- Design and write detections for data misuse and data exfiltration at scale.
- Build automation and detection models to surface anomalous activity and speed up response.
- Proactively hunt for insider threats across corporate and production environments.
- Partner with engineering teams to develop advanced detection solutions.
- Work with Human Resources and Legal on complex investigations.
- Recommend and help design countermeasures to reduce insider risk.
- Participate in incident response and provide subject-matter expertise during insider threat incidents.
- Take part in an on-call rotation supporting 24/7 detection and response coverage.
- Contribute to security awareness messaging and training.
View Full Description & ApplyYou'll be redirected to the employer's site
