Insider Risk Security Engineer

About the role

For our client, we are seeking an Insider Risk Security Engineer to join the team of a leader in the Information Technology space. This role will help strengthen a mature insider risk function by improving detections, refining investigative workflows, and reducing noise across security alerts. The position will own end-to-end case work across endpoint and user activity, using modern security tooling to support timely and well-documented investigations. It also partners closely with HR, Legal, and business stakeholders to manage active matters with discretion and consistency. Location: Remote - US based candidates only, no visa sponsorship available.

Responsibilities

• Refine detection capabilities of the Insider Risk Program by enhancing rules and reducing false alerts
• Conduct investigations of endpoint and user activities utilizing EDR/XDR, UEBA, and SIEM tools, managing cases from start to finish
• Drive development of insider risk investigation playbooks based on case patterns and lessons learned
• Act as a liaison with HR, Legal, and business leaders regarding active investigations and documentation preparation
• Mentor junior analysts and represent the Insider Risk team across the organization

Qualifications

• 5-7 years of experience in insider risk, data protection, or security operations involving process ownership and detection framework design
• Foundational knowledge of AI/ML technologies applied in security contexts
• Proficiency in Python or JavaScript aimed at automating investigative workflows
• Experience managing alerts within SIEM or SOAR tools
• Strong communication skills for engagement across HR, Legal, and business stakeholders
• U.S. Citizenship required

Benefits

• Various health plans
• Time off for vacation and sick leave
• Parental leave options
• Retirement plans
• Education reimbursement
• In-office perks

Pay

$134,000 – $167,500 annually