Insider Risk Security Engineer

What you'll do

• Implement and maintain Insider Risk Management (IRM) technologies, policies, and rules across the organization.
• Troubleshoot IRM and Data Loss Prevention (DLP) tools to ensure effective security operations.
• Fine-tune IRM and DLP rules to minimize false positives and improve detection accuracy.
• Develop innovative use cases to detect anomalous user activities and security trends.
• Provide technical guidance and support as the primary escalation point for insider risk issues.
• Contribute to management reporting by providing insights into the performance of the IRM ecosystem.
• Support active incidents and cross-functional opportunities to identify human-risk compromises.

What we're looking for

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Information Technology, Counterintelligence, or a related discipline.
• 5+ years of experience as a security engineer familiar with typical DLP and UEBA tools.
• Proven experience implementing, troubleshooting, and administering Insider Risk and DLP technologies in a global enterprise.
• Experience with cloud security and cloud-based applications.
• Excellent problem-solving skills and the ability to work independently.
• Outstanding communication skills and the ability to collaborate effectively across different teams and stakeholders.
• Certifications in cybersecurity, such as CISSP, CISM, or CEH (preferred).
• Formal education and training in insider risk and/or counterintelligence (preferred).