Insider Threat Engineer

📋 Description

• Lead Insider Threat Digital Investigations across IR teams.
• Hunt for insider threats using SIEM, EDR, UEBA data sources.
• Develop detections, rules, and playbooks for insider threats.
• Collaborate with Legal, HR, Privacy; present findings to leadership.
• Ensure regulatory and privacy requirements are met in investigations.

🎯 Requirements

• 5+ years in technical security; 2+ years insider threat or investigations.
• Experience leading complex investigations with forensic tools (EnCase, FTK, X-Ways).
• Deep knowledge of SIEM (Splunk, Elastic), EDR (CrowdStrike, SentinelOne), UEBA.
• Strong scripting/programming skills (Python, PowerShell).
• Excellent written and verbal communication; explain tech to non-tech.
• Experience with legal and HR on sensitive matters.

🎁 Benefits

• Equal opportunity employer; commitment to diversity and inclusion.
• Reasonable accommodations for applicants with disabilities.
• Opportunity to work on large-scale internet infrastructure projects (Cloudflare initiatives).
• Collaborative, AI-enabled culture with rapid iteration.