Remote Cybersecurity Analyst: Insider Risk Analytics

Swoon; United States; Remote; USD 74,000 - 105,000; Full time

Job summary

Swoon is seeking a highly technical Cybersecurity Analyst specializing in Insider Risk Analytics to support a global security team. The role focuses on insider threat detection, investigations, data analytics, and automation.

Expect hands-on work with SIEM, UEBA, and DLP, plus developing complex detection queries and dashboards. The ideal candidate will automate investigations using Python or PowerShell, collaborate across Security Engineering and IR teams, and identify emerging insider risk

Qualifications

• 3-4+ years in cybersecurity investigations or related security disciplines.
• Hands-on experience with SIEM, UEBA, and DLP technologies.
• Ability to develop complex SIEM queries and dashboards.

Responsibilities

• Analyze large datasets across security platforms to identify insider threats.
• Develop, test, and optimize SIEM detection rules and dashboards.
• Investigate alerts, reduce false positives, and improve detection accuracy.
• Build analytics reports and monitoring capabilities for investigations.
• Develop Python or PowerShell scripts to automate investigations.
• Collaborate with Security Engineering, Insider Risk, DLP, and IR teams.
• Identify insider risk trends and suggest monitoring improvements.

Skills

SIEM

UEBA

DLP

Security analytics

Threat detection

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems

Tools

SPL

KQL

YARA-L

SQL

Python

PowerShell

Job description

Swoon is seeking a highly technical Cybersecurity Analyst specializing in Insider Risk Analytics to support a global security team. The role focuses on insider threat detection, investigations, data analytics, and automation.

Expect hands-on work with SIEM, UEBA, and DLP, plus developing complex detection queries and dashboards. The ideal candidate will automate investigations using Python or PowerShell, collaborate across Security Engineering and IR teams, and identify emerging insider risk