Senior Security Engineer, Insider Threat

Accountabilities

• Identify security visibility gaps across corporate and production environments and partner with relevant teams to improve logging and detection coverage.
• Participate in a 24/7 on-call rotation supporting threat detection and incident response activities.
• Apply coding, data analytics, investigation, and threat-hunting techniques to identify and respond to insider threats.
• Develop scalable detection logic to identify data misuse, abuse, and exfiltration.
• Build automation and detection models that identify anomalous activity and strengthen security response capabilities.
• Proactively hunt for insider threats across corporate and production environments.
• Collaborate with engineering teams to design and implement advanced detection solutions.
• Partner with HR and Legal on sensitive and complex insider threat investigations.
• Design and advise on countermeasures that reduce insider threat exposure and mitigate identified risks.
• Contribute subject-matter expertise during insider threat incident response activities.
• Support security awareness, communications, and training initiatives related to insider risk.

Requirements

• 5+ years of hands-on security operations experience, including areas such as detection engineering, threat hunting, incident response, digital forensics, and/or threat intelligence.
• Bachelor’s degree in a technical discipline or equivalent practical experience.
• Experience or exposure to data science, security analytics, or analytical approaches for insider threat detection.
• Familiarity with insider threat technologies, particularly Data Loss Prevention (DLP) and User and Entity Behavior Analytics (UEBA).
• Strong understanding of how insider threat programs and incident response teams coordinate during active investigations.
• Knowledge of insider threat challenges within consumer-facing/B2C technology environments.
• Familiarity with the Cyber Kill Chain and MITRE ATT&CK frameworks and their application to insider threat scenarios.
• Demonstrated experience automating security detection and response workflows.
• Proficiency in Python and SQL.
• Hands-on experience with AWS services such as EC2, S3, Lambda, and RDS is preferred.
• Strong self-direction, organization, prioritization, and investigative judgment.
• Ability to remain composed and effective when handling high-pressure security incidents.
• Must be authorized to work in the United States without sponsorship.

Benefits

• $130–$142 per hour, depending on experience.
• Fully remote position within the United States.
• Full-time schedule of 40 hours per week, Monday through Friday, 8 hours per day.
• Approximately 12-month contract, from September 22, 2026 through September 21, 2027.
• Opportunity to help build a new insider threat program and influence security strategy at scale.
• High-impact work spanning threat detection, incident response, security engineering, analytics, and investigations.
• Collaboration with engineering, HR, Legal, and business stakeholders in a complex technology environment.
• Exposure to advanced security technologies, automation, data analytics, and cloud infrastructure.
• Opportunity to contribute to security awareness and organizational risk-reduction initiatives.