Insider Risk Security Engineer
Core
Engineer Insider Risk Management (IRM) technologies and policies to detect anomalous user activities and protect data from insider threats.
Role type
Security Engineer (Insider Risk)
Builds
Insider Risk Management tools, DLP rules, and detection use cases
Domain
Cybersecurity / Insider Threat / Data Loss Prevention
Deliverable
production ML models
Required skills
DLP tools, UEBA tools, cloud security, security engineering, policy implementation, troubleshooting, metrics reporting
Preferred skills
CISSP/CISM/CEH, Microsoft E5, KQL, YARA, Regex, JSON, Lucene Query Syntax, behavioral analysis, semiconductor industry experience
Technologies
DLP, UEBA, Microsoft E5, KQL, YARA, Regex, JSON, Lucene
Responsibilities
Implement and maintain IRM technologies and policies; Collaborate with InfoSec, IT, HR, and Legal to refine policies; Fine-tune IRM and DLP rules to minimize false positives; Serve as technical escalation point; Contribute to management reporting and metrics
Seniority
Mid-Senior (5+ years experience)
