Overview

 Senior Insider Threat Analyst – Santa Monica, 90404, United States of America 

How we LEAD:

The Senior Insider Threat Analyst, Global Insider Threat Management reports to the VP, Global Insider Threat Management. This role is responsible for detecting, investigating, and responding to potential data loss, insider threat, and AI-related security incidents across a global enterprise using SIEM, DLP, UEBA, and emerging AI security tools.

The analyst will proactively identify risky behaviors, fine-tune detection capabilities, and deliver clear, actionable investigative insights that strengthen the organization’s overall data protection and insider threat posture.

How you’ll CREATE:

  • Respond to DLP alerts, monitor DLP consoles and analyze security events to identify potential data loss incidents.

  • Hands-on investigation and threat hunting in SIEM, UEBA and DLP tools.

  • Respond to alerts from AI security tools for monitoring and protection.

  • Respond to AI-related security incidents or abuse.

  • Conduct in-depth investigations of suspected insider threat incidents, including unauthorized access, data exfiltration, and policy violations.

  • Regularly review and fine-tune DLP and UEBA rules/policies to reduce false positives and improve detection accuracy.

  • Develop and implement insider threat detection use cases, alert rules, and incident response playbooks.

  • Prepare detailed reports on investigation findings, risk assessments, and recommended remediation actions.

  • Assess potential insider threats by evaluating the risks associated with users, data, and systems.

  • Participate in data protection audits, compliance reviews, and risk assessments related to DLP.

  • Contribute to knowledge-sharing initiatives by documenting case studies from DLP and UEBA incidents.

  • Assist business units in identifying sensitive data and map out potential leakage points.

  • Gathers documentation and contributes to the Global Insider Threat Management Team knowledge base.

  • Organizes and facilitates cross-function insider threat project alignment with all applicable stakeholders to accomplish common goals.

  • Duties as assigned.

Bring your VIBE:

  • Investigation and threat hunting skills

  • Ability to work under pressure and handle multiple projects with tight deadlines across a global enterprise

  • Self-motivated, detail oriented with analytical skills

  • Good written and verbal communication skills, with the ability to convey complex technical information to non-technical stakeholders

  • Identify trends and behavioral patterns that may indicate insider threat activity, ensuring alerts are risk-weighted and actionable

  • High level of integrity and the ability to handle sensitive information with discretion

  • Good interpersonal and group dynamic skills

  • Strong collaborator and a team player

  • Good ability to influence without explicit authority

  • Willingness to participate in on-call rotations and respond to incidents outside of normal business hours if necessary

  • Excellent analytical skills and a creative problem-solving mindset

  • Good understanding of artificial intelligence and machine learning concepts and workflows

  • Familiarity with the unique threats and vulnerabilities associated with AI/ML

  • 3-5 years of experience in cybersecurity, information security, or a related field with a focus on insider threat analysis and investigation.

  • Proven experience in digital forensics, incident response, or threat hunting.

  • Hands-on investigation and threat hunting in SIEM (Security Information and Event Management), DLP (Data Loss Prevention), UEBA (User and Entity Behavior Analytics) and other relevant security technologies.

  • Hands-on experience or exposure to AI technologies

  • Bachelor’s degree in Cybersecurity Information Assurance or related field experience

  • Experience with insider threat detection platforms like SIEM, DLP, and UEBA.

  • Knowledge of relevant legal and regulatory requirements related to data protection and privacy.

 

Before you apply -
Register now and turn on alerts for jobs like this!

  • To apply for this position, receive job notifications and manage your applications, click "Register with Diversity Jobs Group".
  • To apply for this position without registering, click "Apply with Customer".

By registering you agree to our terms and conditions.

Apply with Customer

IMPORTANT: Before applying for this role, please make sure you have the right to work in the country where the role is based. Unless it clearly stipulates within in the job advert above that the hiring company is looking to or able to sponsor applicants it is deemed that the hiring employer will only consider applications from those able to comply with and work in the country where the role is based.