Senior Associate Insider Threat - Acquisition Cybersecurity Team

What you'll do

• Monitor and analyze user activity and security infrastructure to detect potential insider threats.
• Conduct in-depth investigations of anomalous behavior using log and network trace analysis.
• Triage and remediate insider threat alerts while taking end-to-end ownership of incident responses.
• Create and maintain process documentation and playbooks for detection and response activities.
• Develop and update insider threat detection strategies based on industry best practices and regulations.
• Provide intelligence services to acquisitions by drafting and sharing vulnerability reports.
• Act as a point of escalation for team analysts regarding complex insider threat matters.

What we're looking for

• Experience in cybersecurity operations focusing on insider threat detection, incident response, or vulnerability management.
• Proficiency in user activity monitoring, network trace analysis, log analysis, and security investigations.
• Ability to script for task automation, implement controls, and manipulate data.
• Strong understanding of security protocols, authentication, authorization, and security architecture principles.
• Hands-on experience with security tools including SIEM, UEBA, IDS, EDR, and email security solutions.
• Knowledge of adversary tactics, insider threat indicators, and detection methods.
• Familiarity with enterprise security technologies and both Windows and Linux operating systems.
• Excellent communication skills for presenting risks and findings to technical and non-technical audiences.