Insider Threat Analyst - 885

About the Role

We are seeking an experienced Insider Threat Analyst to join our security team. In this role, you will review and triage alerts, conduct investigations, develop detection strategies, and help mature our insider threat program. You will work cross-functionally with Legal, HR, IT, and business units to reduce internal risk while maintaining employee trust. This position requires strong technical expertise, investigative capability, and excellent interpersonal skills.

Key Responsibilities

• Review, triage, and prioritize alerting from DTEX, Microsoft Purview, and other monitoring platforms
• Develop, tune, and optimize insider threat detection use cases across UEBA, DLP, SIEM, and endpoint monitoring platforms
• Monitor and analyze DTEX telemetry to identify high-risk user behaviors and potential data exfiltration activities
• Leverage Microsoft Purview for data loss prevention, information protection, and insider risk management capabilities
• Utilize Microsoft Entra ID for identity analytics, access reviews, and monitoring privileged account activity
• Perform behavioral analysis to identify anomalous patterns indicative of data exfiltration, fraud, sabotage, or policy violations
• Conduct proactive threat hunting to discover previously undetected insider risks and develop corresponding detection mechanisms
• Analyze technical indicators alongside contextual information such as HR events, travel data, and organizational changes to assess risk holistically

YOU MUST HAVE:

• Bachelor's degree minimum
• Minimum 5+ years of experience in insider threat analysis or a related cybersecurity discipline
• Minimum 5+ years' experience with DTEX or similar insider threat monitoring platforms

WE VALUE:

• Demonstrated experience conducting investigations involving data theft, fraud, or policy violations
• Hands-on experience with Microsoft Purview (Insider Risk Management, DLP, Information Protection) and Microsoft Entra ID
• Experience with UEBA platforms (e.g., Securonix, Exabeam, Microsoft Sentinel) and DLP solutions
• Proficiency with SIEM platforms, log analysis, and query languages (e.g., Splunk SPL, KQL, SQL)
• Experience drafting security procedures, playbooks, and technical documentation
• Excellent written and verbal communication skills, including the ability to present technical findings to non-technical audiences
• Counterintelligence experience, particularly in technology protection, economic espionage, or protecting proprietary information and trade secrets
• Experience contributing to insider threat program development and maturation
• Familiarity with behavioral psychology, social engineering tactics, and human-centered security approaches

Compensation & Benefits

The pay range for this role is $84,000 -- $105,000 annually. Actual compensation within this range may vary based on the candidate's skills, educational background, professional experience, and unique qualifications for the role.