Insider Threat Detection Engineer

Location: New York | Business Area: Legal, Compliance, and Risk

About the role

The Staff Risk and Investigations team within Bloomberg’s Chief Information Security Office (CISO) is responsible for implementing an Insider Threat program across Bloomberg, including designing and building dynamic models focused on detecting anomalous user behavior and other high-risk events. Bloomberg is seeking a highly capable individual to join the Staff Risk and Investigations team (SR&I) as a Detection Engineer. This person will enhance the Insider Threat program by working closely with security, development, and investigative teams to solve complex risk and security challenges.

Responsibilities

• Research, develop, document and tune novel detections that uncover anomalies related to insider risk
• Leverage technology, custom analytics and automation to create scalable detection pipelines and support investigative workflows
• Design and mature detection strategy, including continuously evaluating changes in actors, tactics, techniques and targets to enhance threat scenarios and use cases to ensure the team maintains pace with a changing insider threat landscape
• Develop and maintain strong working relationships and cross-functional collaboration with key partners and stakeholders including Information Security, Technology, Physical Security, Incident Management, Legal, HR and others

Requirements

• 5+ years experience working in a detection, incident response, or insider-risk role — we are seeking mid-level and senior candidates
• Experience with a broad range of security tools and technologies including endpoint detection and network technologies, and SOAR/SIEM platforms
• Initiative and ability to thrive in a dynamic, fast-paced and collaborative environment with minimal supervision
• Demonstrated success in managing projects and working closely with business stakeholders
• Experience in working with and handling extremely sensitive materials and information
• Awareness of latest cyber security trends and developments
• Proficiency in Python and SQL
• Strong verbal and written communication, presentation and stakeholder management skills

Nice to have

• Exposure to or knowledge of employment and/or privacy laws and regulation
• Experience with AI / LLM technologies to help enrich and automate security operational processes
• Computer forensics, including analyzing Linux, Windows, and MacOS systems
• Comfort with presenting to executive leaders in technology roles and explaining security risk to non-tech fields

Pay

Salary range: $190,000 – $260,000 USD annual + benefits + bonus.

Benefits

• Comprehensive and generous benefits plan including merit increases and incentive compensation (exempt roles only)
• Paid holidays and paid time off
• Medical, dental, vision, short and long term disability benefits
• 401(k) with company match
• Life insurance
• Various wellness programs