Insider Threat Analyst

Coforge; España; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Coforge is seeking an experienced Insider Threat Analyst to join its Cyber Security team in Spain. You will identify, investigate, and mitigate insider risks while ensuring business operations remain secure and uninterrupted.

Responsibilities include balancing data-sharing needs with regulators and customers, escalating issues, and developing insider threat use cases. Strong analytics and SIEM expertise are essential.

Formación

• 3+ years of experience in Cyber Security, Insider Threat, DLP, or related security operations roles.
• Strong experience in data analysis, security monitoring, SIEM platforms, and log analysis.
• Excellent pattern recognition and analytical investigation skills.
• Experience with Microsoft Purview DLP.
• Knowledge of Cloud Security, SaaS environments, and CASB solutions.
• Understanding of computer crime, fraud investigations, and insider threat methodologies.
• Strong knowledge of information security principles and best practices.
• Ability to solve problems involving multiple complex systems and technologies.
• Advanced English proficiency (minimum C1 level).

Responsabilidades

• Ensure insider risks are effectively balanced against business requirements for sharing data with approved third parties, regulators, and customers.
• Escalate security issues when necessary to protect organisational data while enabling employees to perform their roles efficiently.
• Collaborate with the DLP Insider Threat Lead to identify and develop insider threat use cases.
• Perform proactive insider threat hunting activities and continuously improve detection methodologies.
• Identify visibility and security control gaps and work with relevant teams to remediate them.
• Recommend high-fidelity threat hunting scenarios for regular investigations and automated alerting capabilities.
• Monitor, analyse, and investigate security events to detect potential insider threats.
• Support the continuous enhancement of insider threat monitoring and response processes.

Conocimientos

Data analysis

Security monitoring

SIEM platforms

Log analysis

Pattern recognition

Analytical investigation

Microsoft Purview DLP

Cloud Security

SaaS environments

CASB solutions

Information security principles

Problem solving

Herramientas

Microsoft Purview DLP

Descripción del empleo

Language Requirements:

Advanced English (C1 minimum)

We are looking for an experienced Insider Threat Analyst to join our Cyber Security team. In this role, you will be responsible for identifying, investigating, and mitigating insider risks while ensuring business operations can continue effectively and securely.

Key Responsibilities

• Ensure insider risks are effectively balanced against business requirements for sharing data with approved third parties, regulators, and customers.
• Escalate security issues when necessary to protect organisational data while enabling employees to perform their roles efficiently.
• Collaborate with the DLP Insider Threat Lead to identify and develop insider threat use cases.
• Perform proactive insider threat hunting activities and continuously improve detection methodologies.
• Identify visibility and security control gaps and work with relevant teams to remediate them.
• Recommend high-fidelity threat hunting scenarios for regular investigations and automated alerting capabilities.
• Monitor, analyse, and investigate security events to detect potential insider threats.
• Support the continuous enhancement of insider threat monitoring and response processes.

Required Skills & Experience

• 3+ years of experience in Cyber Security, Insider Threat, DLP, or related security operations roles.
• Strong experience in data analysis, security monitoring, SIEM platforms, and log analysis.
• Excellent pattern recognition and analytical investigation skills.
• Experience with Microsoft Purview DLP.
• Knowledge of Cloud Security, SaaS environments, and CASB solutions.
• Understanding of computer crime, fraud investigations, and insider threat methodologies.
• Strong knowledge of information security principles and best practices.
• Ability to solve problems involving multiple complex systems and technologies.
• Advanced English proficiency (minimum C1 level).

What We Are Looking For

• Strong analytical and investigative mindset.
• Ability to work independently in a fast-paced security environment.
• Excellent communication and stakeholder management skills.
• Passion for threat hunting, security monitoring, and insider risk management.
• Commitment to continuous learning and staying current with emerging cyber threats and technologies.