Insider Threat Detection Architect

Nvidia Corporation; Santa Clara (CA); On-site; USD 168,000 - 311,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

NVIDIA is seeking an Insider Threat Engineer to protect our people, intellectual property, and data across identity, endpoint, cloud, and collaboration systems. You will build detections, automate workflows, and support investigations that preserve evidence and improve telemetry.

The role requires both engineering and investigative experience, with strong programming skills and knowledge of security technologies.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Data Engineering, or related field, or equivalent experience.
• 7+ years in insider threat, detection engineering, security operations, incident response, digital forensics, data protection, threat hunting, or related field.
• Experience conducting security investigations: scope, evidence, timelines, findings, escalation, lessons learned.
• Experience with security technologies such as SIEM, DLP, UEBA, EDR, insider-risk management, identity security, case management, or security orchestration.
• Proficiency in at least one programming or scripting language (Python, Go, Java, JavaScript, or TypeScript) and building automation with APIs, structured data, source control, and testing.
• SQL, security-query, and data-analysis skills; correlating data from multiple sources.
• Knowledge of identity and access management, endpoints, cloud, collaboration platforms, SaaS, data classification, source-code environments, and data-exfiltration methods.
• Experience translating insider-risk scenarios into telemetry requirements, detection logic, investigation workflows, and performance measures.

Responsibilities

• Build, test, deploy, and tune detections across identity, endpoint, cloud, SaaS, collaboration platforms, source-code repositories, build systems, removable media, data movement, and employee-lifecycle signals.
• Lead and support investigations involving data movement, unapproved app use, external sharing, access anomalies, compromised accounts, and employee transitions.
• Collect and correlate information from multiple sources to reconstruct activity and establish timelines.
• Develop automation, data pipelines, integrations, dashboards, and investigation tools to reduce manual work.
• Improve insider-risk and data loss prevention capabilities by assessing policy performance, detection coverage, and alert quality.
• Use hypotheses, threat models, test cases, version control, peer review, and performance measures to improve detections.
• Present findings clearly to Security, Incident Response, Legal, HR, Privacy, and business partners.
• Work with partners on evidence preservation, containment, escalation, and remediation.

Skills

Python

Go

Java

JavaScript

TypeScript

Education

Bachelor's degree in CS/Security

Tools

SIEM

DLP

UEBA

EDR

Case Management

SOAR

Job description

NVIDIA is seeking an Insider Threat Engineer to protect our people, intellectual property, and data across identity, endpoint, cloud, and collaboration systems. You will build detections, automate workflows, and support investigations that preserve evidence and improve telemetry.

The role requires both engineering and investigative experience, with strong programming skills and knowledge of security technologies.