Insider Threat Security Engineer (43)

Summary

To build a mature insider threat detection program, the remote contract Insider Threat Security Engineer will develop anomaly detection solutions, write distributed Python applications, and create machine learning workflows focused on internal user activity.Key responsibilitiesBuild anomaly detection pipelines and develop machine learning workflows for insider threat detectionWrite distributed Python applications and work extensively with ElasticsearchDevelop statistical models to identify anomalous behavior within the organizationRequired qualifications5+ years of hands-on experience in security operations, including detection engineering and incident responseBachelor's degree in a related technical field or equivalent practical experienceExperience with PySpark/Spark and machine learning pipeline developmentKnowledge of insider threat technologies and familiarity with the Cyber Kill Chain and MITRE ATT&CK FrameworkExperience automating security detection and response, preferably in AWS services

Job Description

To build a mature insider threat detection program, the remote contract Insider Threat Security Engineer will develop anomaly detection solutions, write distributed Python applications, and create machine learning workflows focused on internal user activity.Key responsibilitiesBuild anomaly detection pipelines and develop machine learning workflows for insider threat detectionWrite distributed Python applications and work extensively with ElasticsearchDevelop statistical models to identify anomalous behavior within the organizationRequired qualifications5+ years of hands-on experience in security operations, including detection engineering and incident responseBachelor's degree in a related technical field or equivalent practical experienceExperience with PySpark/Spark and machine learning pipeline developmentKnowledge of insider threat technologies and familiarity with the Cyber Kill Chain and MITRE ATT&CK FrameworkExperience automating security detection and response, preferably in AWS services