Lead AI-Driven Insider Risk & Telemetry Security Analyst

AT&T; Dallas (TX); On-site; USD 141,000 - 237,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement

Paid Time Off

Parental Leave

Disability Benefits

Life Insurance

Employee discounts

Job summary

AT&T is seeking a Lead Cybersecurity Insider Risk Analyst in Dallas, TX. The role leads response to high-priority cybersecurity incidents focusing on insider risk, with telemetry-driven detection and automation integration.

The incumbent will oversee end-to-end incident handling across employees, contractors, and vendors, driving continuous improvements and communicating with executive stakeholders.

Qualifications

• 5+ years of hands-on cybersecurity experience in incident response, security operations, insider risk, threat detection, or related function.
• Experience leading or handling escalated incidents, including triage, investigation, containment, remediation, and post-incident reporting.
• Proficiency with security telemetry and investigation workflows across endpoint and network data sources; experience using SIEM analytics (Splunk) and EDR tooling.

Responsibilities

• Incident leadership for escalated insider risk and cyber incidents; establish investigation strategy and drive closure.
• Conduct deep-dive analysis using telemetry, endpoint/network evidence, and threat intelligence to determine scope, impact, and root cause.
• Create, tune, and deploy new detection rules and analytics; reduce false positives and improve signal-to-noise.
• Perform targeted hunts to discover emerging behaviors and translate findings into detections, controls, and playbooks.
• Partner with IT and security stakeholders to drive containment, remediation, and recovery actions across endpoints, identities, and cloud services.
• Produce executive updates and post-incident summaries for leadership.
• Coach and mentor analysts; serve as SME across incident response.
• Develop integrations between security tools and enable automation and AI-assisted analytics.

Skills

incident response

security operations

insider risk

communication skills

mentorship

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Splunk

EDR tooling

Python

PowerShell

Bash

Tanium

Job description

AT&T is seeking a Lead Cybersecurity Insider Risk Analyst in Dallas, TX. The role leads response to high-priority cybersecurity incidents focusing on insider risk, with telemetry-driven detection and automation integration.

The incumbent will oversee end-to-end incident handling across employees, contractors, and vendors, driving continuous improvements and communicating with executive stakeholders.