Insider Threat Engineering Support Lead

What you'll do

• Develop, test, and tune behavioral analytics and SIEM detection rules to identify insider threat vectors.
• Translate investigative insights into automated, resilient detection logic for data exfiltration and privilege abuse.
• Conduct hypothesis-driven threat hunting across multi-source log repositories and telemetry data.
• Analyze large, complex datasets to establish baseline activity and isolate anomalies.
• Partner with incident response teams to turn hunt findings into long-term defensive safeguards.
• Manage the end-to-end detection engineering lifecycle using SDLC best practices and version control.
• Create comprehensive technical documentation for all detection artifacts and engineering designs.

What we're looking for

• Bachelor's degree or equivalent experience required; Master's degree preferred.
• 6+ years of experience constructing, tuning, and executing complex queries within SIEM, data lake, or log analytics platforms (preferred).
• Strong understanding of core Cybersecurity and Insider Threat concepts, including behavioral and human-centric risk models (preferred).
• Demonstrated ability to perform proactive, hypothesis-based threat hunting across enterprise log sources (preferred).
• Ability to navigate, sanitize, query, and troubleshoot high-volume, heterogeneous datasets.
• Ability to articulate complex data findings and engineering designs to both technical and non-technical stakeholders.
• Capability to manage priorities autonomously and deliver results in a fast-paced environment.
• Ability to combine an investigative analytical lens with a software/security engineer's systems-building perspective.