Insider Threat Analyst | DLP/Endpoint Protection/IR

Job Summary:

The Insider Threat Analyst will play a critical role in identifying, analyzing, and mitigating threats posed by individuals within the organization, whether they are intentional or accidental. The Analyst will focus on preventing data breaches, intellectual property theft, fraud, sabotage, or other security incidents. This role requires a mix of behavioral analysis, cybersecurity expertise, and understanding of internal security protocols.

Key Responsibilities:

Monitor and Analyze Insider Threat Indicators:

• Continuously monitor insider activities across the network, endpoints, and applications using various security tools.
• Identify abnormal patterns of behavior and potential security risks, including data exfiltration, misuse of credentials, and policy violations.

Incident Detection and Response:

• Conduct real-time analysis of insider threat events, including unauthorized data transfers, inappropriate use of company resources, and violations of security protocols.
• Escalate and respond to security incidents related to insider threats in collaboration with incident response teams.

Collaboration and Communication:

• Work closely with Forensics, Legal, HR, IT, Risk Management and Global Security teams to ensure a coordinated response to insider incidents.
• Communicate findings to stakeholders and provide recommendations to mitigate risks.

Continuous Improvement and Reporting:

• Regularly review and refine insider threat detection capabilities and tools.
• Create reports on insider threat trends, incidents, and preventive measures.
• Provide actionable insights and recommendations to enhance internal threat monitoring strategies.

Risk Assessment and Mitigation:

• Evaluate internal risks associated with employee behavior, third-party access, and other internal vulnerabilities.
• Develop strategies to minimize risks and provide ongoing awareness training for employees about potential insider threats.
• Partner with appropriate parties to deliver risk mitigating solutions.

Security Program Development:

• Support the development and implementation of an Insider Threat Program, ensuring compliance with relevant regulations and best practices.
• Maintain UpToDate knowledge of emerging threats, technologies, and security challenges related to insider threats.

Key Skills & Qualifications:

Education: 

Strong knowledge in the areas of Cybersecurity, Information Technology, Computer Science, or related field.  

Experience:  

2+ years of experience in cybersecurity, threat analysis, or related roles.  

Experience with insider threat detection tools (e.g.,UAM, UEBA, SIEM, DLP) and technologies.

Skills:

• Strong understanding of data loss prevention (DLP), endpoint security, network monitoring, and incident response.
• Ability to identify and investigate anomalous insider behaviors using behavioral analytics and cybersecurity tools.
• Proficiency in forensics tools and techniques.
• Excellent analytical and communication skills.

Certifications (Preferred):

Certified Information Systems Security Professional (CISSP)  

Certified Ethical Hacker (CEH)  

Certified Insider Threat Program Manager (CITPM)