Insider Threat Tech Lead

Webhosting; Austin (TX); On-site; USD 150,000 - 230,000; Full time

Job summary

Cloudflare is seeking an Insider Threat Tech Lead in Austin to spearhead investigations, threat hunting, and the development of advanced detections. You will partner with Privacy, Legal, HR, and GRC to ensure investigations stay compliant and respectful of employee privacy while protecting the company from insider risks.

You will design and refine response playbooks, lead cross-functional collaboration, and drive improvements in detection and response with a focus on regulatory and ethical

Qualifications

• Experience conducting technical insider threat investigations with formal documentation.
• Ability to collect, preserve, and analyze digital evidence across endpoints, networks, and cloud services.
• Strong collaboration with Legal, HR, Privacy, and security teams to ensure compliant investigations.

Responsibilities

• Lead insider threat digital investigations and coordinate with IR teams on incidents.
• Develop detections, rules, and use cases to identify insider threat indicators.
• Hunt for threats using SIEM, EDR, UEBA, and other security tools.
• Collaborate with SIRT and Threat Detection to mature insider threat capabilities.

Skills

Threat hunting

Digital investigations

Incident response

Cross-functional collaboration

Tools

SIEM

EDR

UEBA

DLP

Job description

Cloudflare is seeking an Insider Threat Tech Lead in Austin to spearhead investigations, threat hunting, and the development of advanced detections. You will partner with Privacy, Legal, HR, and GRC to ensure investigations stay compliant and respectful of employee privacy while protecting the company from insider risks.

You will design and refine response playbooks, lead cross-functional collaboration, and drive improvements in detection and response with a focus on regulatory and ethical