Senior Security Engineer, Insider Threat Detection & Response

We are seeking a Senior Security Engineer to help build and mature an insider threat detection and response program from the ground up. You will join a front-line security team that detects, investigates, and responds to threats against company data, systems, and infrastructure. In this role, you will shape detection capabilities through hands-on technical work and cross-functional influence, with direct impact on how the organization protects its most sensitive information.
Design and write detections for data misuse and data exfiltration at scale.
Partner with engineering teams to develop advanced detection solutions, and work closely with Human Resources and Legal on complex investigations.
Recommend and help design countermeasures that reduce insider risk.
Participate in an on-call rotation that supports 24/7 detection and response coverage.
Contribute to security awareness messaging and training.
5+ years of hands-on experience in security operations, such as detection engineering, threat hunting, incident response, digital forensics, or threat intelligence.
~ Bachelors degree in a related technical field, or equivalent practical experience.
~ Experience with insider threat technologies, such as Data Loss Prevention (DLP) and User and Entity Behavior Analytics (UEBA).
~ Exposure to data science and analytics approaches that apply to insider threat detection.
~ Familiarity with the Cyber Kill Chain and MITRE ATT&CK frameworks and how they apply to insider threats.
~ Self-motivated, creative problem-solver who works well independently.
~ Experience with AWS services such as EC2, S3, Lambda, and RDS.
Proficiency in Python and SQL.
Location: Remote (within the U.Work Schedule: Full-time, 40 hours per week (Monday-Friday), plus participation in an on-call rotation
W-2 Contract