Insider Threat Analyst

Job Details for Senior Insider Threat Analyst SME- Hybrid, either in Phoenix, AZ or Lone Tree, CO

Work Model:

• Hybrid position: 3 days on-site (Mondays, Wednesdays, Thursdays)
• Flexible for remote work on other days.

Role Overview:

As a Senior Insider Threat Analyst, you will lead the development of a cutting-edge insider threat operations program and implement advanced detection tools. Your responsibilities include deploying and configuring new technologies, creating policies, and collaborating across teams to enhance threat detection and response capabilities. This role is vital for protecting organizational assets against insider risks like data breaches, intellectual property theft, and malicious activities.

Key Responsibilities:

Program Development:

• Design and implement a comprehensive insider threat program aligned with organizational and regulatory requirements.
• Develop policies, workflows, and metrics to detect, investigate, and mitigate insider risks.

Tool Deployment:

• Lead deployment and configuration of insider threat detection tools.
• Ensure seamless integration with existing security systems, including SIEM and SOAR platforms.
• Collaborate with vendors and IT teams for tool customization.

Threat Detection and Analysis:

• Monitor user and entity behavior analytics (UEBA) to identify suspicious activities.
• Conduct investigations into insider incidents in collaboration with cybersecurity, HR, and legal teams.
• Optimize detection rules, alerts, and risk scoring models.

Collaboration and Training:

• Serve as the subject matter expert for insider threat risks and tools.
• Train junior analysts and stakeholders on detection techniques and tool utilization.

Incident Response:

• Develop and execute response playbooks for insider threat scenarios.
• Support incident investigations, ensuring documentation and root-cause analysis.

Required Qualifications:

• Education: Bachelor's degree in cybersecurity, information technology, or related field (advanced degree preferred).
• Experience:
• 7 years in cybersecurity with a focus on insider threat analysis and program development.
• Proven expertise in deploying and managing insider threat tools (e.g., DTex InTERCEPT).
• Strong understanding of UEBA tools, digital forensics, and DLP strategies.
• Skills:
• Familiarity with SIEM platforms, data analytics tools, and insider threat indicators.
• Experience in scripting and automation (BigQuery, Python, PowerShell) is a plus.

Preferred Qualifications:

• Bachelor's degree in computer science or related field.
• Certifications: CISSP, CISM, CISA, GIAC, or insider threat-specific credentials.
• Knowledge of regulatory requirements (e.g., GDPR, CCPA) related to data protection.

Key Competencies:

• Strong analytical, critical thinking, and strategic skills.
• Self-driven with attention to detail and the ability to work independently in fast-paced environments.
• Proficient in collecting and interpreting data for actionable threat intelligence.

This opportunity provides a platform to significantly influence the organization's insider threat program while utilizing cutting-edge technology in a dynamic environment.