Insider Threat Analytics Advisor

NTT DATA, Inc.; Dallas, Northern (TX, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

NTT DATA is seeking a Security Analysis Specialist Advisor in Dallas, TX. The Insider Threat Analyst will monitor, detect, investigate, and respond to insider threat activities affecting confidentiality, integrity, or availability of assets.

The role collaborates with Security Operations, IT Operations, HR, Legal, Compliance and business stakeholders to enhance the Insider Threat Program, develop detection capabilities, and provide incident assessments and remediation recommendations.

Qualifications

• 3+ years in Security Operations, Insider Threat, Incident Response or related security roles.
• Experience with SIEM, UEBA, EDR, or DLP technologies.
• Strong ability to analyze user activity logs and behavioral analytics.

Responsibilities

• Monitor user activity across enterprise systems to detect anomalous behavior.
• Investigate insider threat alerts from initial detection through resolution.
• Collaborate with HR, Legal, Compliance, and IT to mitigate insider risks.
• Develop and tune detection use cases and analytics models.
• Prepare investigation reports and executive summaries.

Skills

Threat Hunting

Security Operations

Incident Response

Data Analysis

Education

Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, or related field

Tools

SIEM (Splunk, Microsoft Sentinel, QRadar, LogRhythm)

EDR (CrowdStrike, Microsoft Defender, Carbon Black)

DLP

Active Directory

Windows

Linux

Microsoft 365

UEBA

Job description

NTT DATA is seeking a Security Analysis Specialist Advisor in Dallas, TX. The Insider Threat Analyst will monitor, detect, investigate, and respond to insider threat activities affecting confidentiality, integrity, or availability of assets.

The role collaborates with Security Operations, IT Operations, HR, Legal, Compliance and business stakeholders to enhance the Insider Threat Program, develop detection capabilities, and provide incident assessments and remediation recommendations.