Insider Threat & Critical Asset Protection Consultant

MassMutual; Boston (MA); Hybrid; USD 130,000 - 170,000; Full time

Job summary

MassMutual is seeking an Insider Threat & Critical Asset Protection Consultant to advance our enterprise insider threat program. The role focuses on asset intelligence, monitoring strategies, detection capabilities, and investigative processes to manage insider-driven risk.

The consultant will collaborate with Cyber Operations, Detection Engineering, HR, Legal, Privacy, and business units to align capabilities with asset sensitivity and business impact while maturing an enterprise-scale program.

Qualifications

• 8+ years of cybersecurity-related experience including insider threat, investigations, or risk analysis.
• 2+ years working cross-functionally with security, HR, Legal, Privacy, or investigative teams.

Responsibilities

• Identify and prioritize critical assets requiring enhanced monitoring and protection.
• Analyze how critical assets are accessed, used, and shared across the enterprise.
• Map relationships between identities, access privileges, business processes, and assets.
• Develop and mature insider threat detection logic and monitoring strategies.
• Partner with HR, Legal, Privacy, Compliance, and security teams to align monitoring with risk.

Skills

Insider threat

Asset protection

Cyber risk analysis

Investigations

Threat monitoring

Cross-functional collaboration

Security analytics

Education

Bachelor's degree in cybersecurity or related field

Tools

SIEM platforms

EDR / XDR

UEBA

DLP

Identity and access management

Job description

Insider Threat & Critical Asset Protection Consultant

Enterprise Cyber Security

Full Time, Remote - MA

***Candidates residing within 50 miles of a MassMutual office will be expected to work a Hybrid schedule of 3 days a week in the office***

The Opportunity

MassMutual is advancing an enterprise Insider Threat program focused on identifying and managing human-driven cyber risk. The Insider Threat Consultant will play a key role in developing the asset intelligence, monitoring strategies, detection capabilities, and investigative processes necessary to identify and manage insider-driven risk.

This role combines deep technical expertise, critical asset analysis, behavioral risk assessment, and investigative discipline to understand how people interact with sensitive assets and to identify patterns of activity that may indicate elevated risk. The consultant will partner with cybersecurity operations, detection engineering, HR, Legal, Privacy, and business stakeholders to align monitoring and investigative capabilities with asset sensitivity and business impact.

The role places particular emphasis on critical asset protection, including identifying what the organization's most valuable assets are, where they reside across the enterprise, who can access them, and how they support critical business processes, so that monitoring, investigative, and detection capabilities are prioritized against the assets that matter most.

This position is suited for an experienced practitioner who can operate across technical, analytical, and investigative domains while helping build and mature an enterprise-scale insider threat program.

The Team

The Insider Threat team is a specialized cybersecurity function responsible for understanding and managing the risks that trusted individuals may pose to MassMutual's critical assets, systems, information, and operations.

The team operates at the intersection of critical asset protection, identity and access management, behavioral analytics, cyber defense, investigations, and workforce risk. Team members develop the intelligence, monitoring strategies, detection capabilities, investigative processes, and analytical frameworks necessary to identify and reduce insider-driven risk.

The team partners closely with Cyber Operations, Detection Engineering, Human Resources, Legal, Privacy, Compliance, Fraud Operations, and business stakeholders to ensure insider risk is identified, assessed, and managed in a consistent, defensible, and risk-informed manner.

The Impact

The Insider Threat Consultant will:

• Identify and prioritize critical assets requiring enhanced monitoring and protection.
• Analyze how critical assets are accessed, used, and shared across the enterprise.
• Map relationships between identities, access privileges, business processes, and critical assets.
• Determine where critical assets reside across cloud, SaaS, on-premises, and third-party technology environments.
• Map business processes, applications, and operational dependencies that support critical assets.
• Identify exposure pathways, concentration risks, and control gaps associated with critical assets.
• Define protection requirements aligned to asset criticality and business impact.
• Analyze behavioral and technical indicators associated with insider risk.
• Identify patterns of activity that may indicate misuse or mishandling of critical assets.
• Conduct and support complex insider threat investigations.
• Correlate identity, access, asset, and behavioral signals across multiple data sources.
• Monitor and analyze deception environments and adversary interaction signals.
• Partner with detection engineering and security operations to develop and refine insider threat detection logic.
• Contribute to tuning enterprise security tooling to improve identification of insider-driven risk.
• Support development of early-warning frameworks and proactive risk identification.
• Produce clear, defensible analytical findings and case documentation.
• Support executive reporting and enterprise risk visibility.

The consultant's work will improve visibility into critical assets, strengthen understanding of user-to-asset trust relationships, increase the fidelity of insider threat detections, and help prevent compromise of the confidentiality, integrity, and availability of MassMutual's most important information and systems.

The Minimum Qualifications

• 8+ years of experience in cybersecurity, insider threat, investigations, intelligence analysis, data protection, enterprise architecture, or related disciplines.
• 2+ years of experience working cross-functionally with security, HR, Legal, Privacy, business, or investigative stakeholders.

Preferred Qualifications

• Experience supporting or building an Insider Threat Program.
• Experience supporting Critical Asset Protection, Information Protection, Data Protection, or Human Risk Management initiatives.
• 2+ years of experience conducting critical asset identification, business impact analysis, operational dependency analysis, or business process mapping.
• Experience performing business process analysis, system dependency mapping, technology assessments, or enterprise architecture reviews.
• Experience building or supporting Crown Jewel Analysis, Cyber Risk, or Cyber Resilience programs.
• Ability to translate technical environments into meaningful business risk and operational impact.
• Experience conducting cyber, digital, fraud, employee misconduct, or insider threat investigations.
• Experience analyzing logs, endpoint telemetry, identity activity, access patterns, and behavioral signals.
• Hands-on experience contributing to detection use cases, monitoring strategies, investigative workflows, or security content development.
• Experience identifying, classifying, mapping, or protecting sensitive information or critical assets.
• Strong understanding of identity and access management concepts, privileged access, trust relationships, and access governance.
• Experience with SIEM, EDR, UEBA, DLP, insider risk management, identity security, and security analytics platforms.
• Experience developing, tuning, or validating detection logic across endpoint, identity, network, and data protection technologies.
• Experience analyzing user behavior and identifying anomalous or high-risk activity through the correlation of multiple data sources.
• Familiarity with deception technologies, cyber deception strategies, or adversary engagement techniques.
• Experience supporting highly regulated environments such as financial services.
• Professional certifications such as CISSP, CISM, GIAC, CDLP, GCFA, GCIH, or equivalent.
• Degree in cybersecurity, intelligence studies, psychology, criminal justice, information systems, or related field.

What You Can Expect at MassMutual

MassMutual offers the opportunity to do meaningful work within a purpose-driven organization that values long‑term impact over short-term outcomes. In this role, you can expect:

• Clear areas of ownership and accountability, with work that connects directly to company and customer outcomes
• A collaborative environment where perspectives are welcomed
• Access to learning, development, and internal networks that support continuous growth and skill-building over time
• Employee‑led communities and forums that foster connection, learning, and inclusion across the organization
• A culture grounded in integrity, responsibility, and stewardship—supported by a company with a strong legacy and a future‑focused mindset

#LI-RK1

MassMutual is an equal employment opportunity employer. We welcome all persons to apply.

If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.

California residents: For detailed information about your rights under the California Consumer Privacy Act (CCPA), please visit our California Consumer Privacy Act Disclosures page.