Insider Threat Tech Lead: Investigations & Detection

CloudFlare; Austin (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Cloudflare seeks an experienced Insider Threat Tech Lead to lead investigations, hunt threats, and develop detections within the Security Threat Detection, Response and Emulation team. You will coordinate with Legal, HR and Privacy while guiding technical investigations and regulatory compliance.

The role blends technical depth with policy and collaboration, requiring strong scripting, experience with forensic tools, and cloud-based security knowledge.

Qualifications

• 5+ years in a technical security role, with insider threat focus
• Proven experience in complex technical investigations using forensic tools
• Deep understanding of SIEM, EDR, UEBA technologies and data sources
• Strong scripting/programming skills (Python, PowerShell)
• Excellent communication with legal, HR and privacy teams

Responsibilities

• Lead Insider Threat investigations and threat hunts.
• Develop and maintain detections, playbooks, and responses.
• Collaborate with Legal, HR and Privacy teams to ensure compliance.
• Provide technical liaison for Insider Threat program across teams.

Skills

Insider Threat

Digital Forensics

Security Investigations

SIEM

EDR

UEBA

Python

PowerShell

Tools

EnCase

FTK

X-Ways

Job description

Cloudflare seeks an experienced Insider Threat Tech Lead to lead investigations, hunt threats, and develop detections within the Security Threat Detection, Response and Emulation team. You will coordinate with Legal, HR and Privacy while guiding technical investigations and regulatory compliance.

The role blends technical depth with policy and collaboration, requiring strong scripting, experience with forensic tools, and cloud-based security knowledge.